Top
Enterprise Postgres 18 for Kubernetes User's Guide

4.15.1 Enabling Client Authentication Using scram-sha-256 Authentication in the FEP Server Container

To enable scram-sha-256 authentication on a newly built FEP server container, deploy a FEPCluster custom resource with the following settings.

4.15.1.1 Define spec.fepChildCrVal.customPgParams

Specify scram-sha-256 for password_encryption.

password_encryption = 'scram-sha-256'

You must restart the database in the FEP server container for the configuration to take effect.

4.15.1.2 Define spec.fepChildCrVal.customPgHba

Add an entry to allow scram-sha-256 authentication.

To allow scram-sha-256 authentication, specify scram-sha-256 in the METHOD.

You must restart the database in the FEP server container for the configuration to take effect.