chore(anonymizer): use PGSSLMODE

SocialGouv · Jul 11, 2024 · fd3f280 · fd3f280
1 parent 4783981
commit fd3f280
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.kontinuous/env/prod/values.yaml b/.kontinuous/env/prod/values.yaml
@@ -216,11 +216,13 @@ jobs-restore-anonymous-prod:
             secretKeyRef:
               name: managed-db-admin-anonymous
               key: PGUSER
+        - name: PGSSLMODE
+          value: require
       run: |
         set -e
         root_path=domifa-prod-backups/anonymizer/pg_dumps
         last_dir=$(aws s3 ls s3://$root_path --recursive | awk '{print $4}' | cut -d "/" -f3 | tail -n 1)
         echo "Restoring $last_dir"
         aws s3 cp --recursive s3://$root_path/$last_dir /tmp/dump/$last_dir
         export PGSSLMODE=disable
-        pg_restore -h postgresql-77eca822-od41f3361.database.cloud.ovh.net -p 20184 --clean --if-exists --no-owner --role=$PGUSERAPP --no-acl --verbose /tmp/dump/$last_dir --dbname defaultdb --sslmode=require
+        pg_restore -h postgresql-77eca822-od41f3361.database.cloud.ovh.net -p 20184 --clean --if-exists --no-owner --role=$PGUSERAPP --no-acl --verbose /tmp/dump/$last_dir --dbname defaultdb