feat: support PG Notify for event streams using credentials

[mkanoor]

Create a Postgres credential that can store certificates and keys or userid/password at server startup and attach it to Activations that use EventStream.

This allows us to test mTLS for Postgres, a sample pg_hba file is attached to this PR.

To test this you need to create certificates and keys for

• Postgres Server called (server.crt and server.key)
• EDA Server called (client.crt and client.key)
• You also need to create the CA certificate (ca.crt)

These files have to be present in
tools/docker/postgres_ssl_config/certs

The docker-compose file tools/docker/docker-compose-mac-pg-mtls.yml can be used to test mTLS

The docker-compose file tools/docker/docker-compose-mac.yml can be used to test userid/password auth

https://issues.redhat.com/browse/AAP-38315

[codecov-commenter]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️

[mkanoor]

The api-e2e-tests work but the api-e2e-multinode-tests fails, seems like a flaky test unrelated to changes in this PR.

[zkayyali812]

Approving, @mkanoor can you also add some documentation that explains how this can be tested?

[mkanoor]

In order to test the mTLS for postgres you need to generate certificates for Postgres Server and for our EDA Server and Activation.
The server.crt will be used by Postgres
The client.crt and client.key will be used by EDA Server, Websocket Worker, Event Stream Worker, Activation (ansible-rulebook)

You can use step-ca to generate certs, follow the instructions to install step-ca , once step-ca is installed and running locally you can generate the certs

For docker running on Mac

cd tools/docker/postgres_ssl_config/certs

1. step ca certificate -san postgres -san host.containers.internal -san localhost -san 127.0.0.1 "localhost" server.crt server.key

2. step ca certificate -san postgres  -san localhost -san 127.0.0.1 postgres client.crt client.key

3. step ca root > ca.crt

Run docker-compose with ./tools/docker/docker-compose-mac-pg-mtls.yml

Create an Event Stream with Basic Auth Credentials
Create an Activation and attach the Event Stream to Activation
Send the data to Event Stream using curl
The data should get to the Running Activation which should have verified itself to the Postgres Server using certificates
Co

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Alex-Izquierdo]

I have not tested it because it would require some time as I have to replicate the env for linux systems (only mac provided) but so far, LGTM.
We need to revisit how we handle the database and pgnotify config as we were discussing.