Security hardening

Learn about the security features at different layers of the PostgreSQL charm - Juju, the cloud it is deployed on, and the artifacts it is built from:

• Overview
  • Environment
    • Cloud
    • Juju
      • Cloud credentials
      • Juju users
  • Applications

Dive deeper into the cryptography mechanisms used by Charmed PostgreSQL, including TLS and authentication:

• Cryptography
  • Resource checksums
  • Sources verification
  • Encryption
  • Authentication
    • PgBouncer authentication to PostgreSQL
    • PostgreSQL cluster authentication
    • Clients authentication to PostgreSQL

Learn about the security posture of the PostgreSQL watcher — the charm that adds a third Raft vote in stereo mode:

• Watcher charm
  • Product architecture
  • Security by design
  • Cryptography in the product
  • Configuring and operating the product securely
    • Default security measures
    • Hardening guidelines
    • Risks inherent to product functions and recommended controls
    • Logging and monitoring
  • Decommissioning the product securely
  • Security lifecycle
  • Reporting vulnerabilities and bugs
  • See also