61 lines
1.3 KiB
YAML
61 lines
1.3 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: postgres-logging-config
|
|
namespace: bakery-ia
|
|
labels:
|
|
app.kubernetes.io/name: bakery-ia
|
|
app.kubernetes.io/component: database-logging
|
|
data:
|
|
postgresql.conf: |
|
|
# PostgreSQL Configuration for Kubernetes
|
|
# Generated for security compliance and monitoring
|
|
|
|
# Network Configuration
|
|
listen_addresses = '*'
|
|
port = 5432
|
|
|
|
# Connection Logging
|
|
log_connections = on
|
|
log_disconnections = on
|
|
log_hostname = off
|
|
|
|
# Query Logging
|
|
log_statement = 'all'
|
|
log_duration = on
|
|
log_min_duration_statement = 1000
|
|
|
|
# Log Destination
|
|
log_destination = 'stderr'
|
|
logging_collector = off
|
|
|
|
# Log Output Format
|
|
log_line_prefix = '%t [%p]: user=%u,db=%d,app=%a,client=%h '
|
|
log_timezone = 'UTC'
|
|
|
|
# Error Logging
|
|
log_error_verbosity = default
|
|
log_min_messages = warning
|
|
log_min_error_statement = error
|
|
|
|
# Checkpoints
|
|
log_checkpoints = on
|
|
|
|
# Lock Waits
|
|
log_lock_waits = on
|
|
deadlock_timeout = 1s
|
|
|
|
# Temporary Files
|
|
log_temp_files = 0
|
|
|
|
# Autovacuum Logging
|
|
log_autovacuum_min_duration = 0
|
|
|
|
# SSL/TLS Configuration
|
|
ssl = on
|
|
ssl_cert_file = '/tls/server-cert.pem'
|
|
ssl_key_file = '/tls/server-key.pem'
|
|
ssl_ca_file = '/tls/ca-cert.pem'
|
|
ssl_prefer_server_ciphers = on
|
|
ssl_min_protocol_version = 'TLSv1.2'
|