On the gooddata-cn Docs, I am not seeing any information on how to enable sslMode for the dex.config.database.sslMode I do not see any information on where to place the certificate or how to get it setup.. Can I get a link to any docs that exist? or have some guidance? https://www.gooddata.com/developers/cloud-native/doc/1.4/installation/k8s/helm-chart-options/

Hi, the explanation for

dex.config.database.sslMode

is missing in documentation. Currently, you can set this value either to

disable

(default) or

require

. In the latter mode, the connection to DB is established using SSL mode, but no certificate verification is performed. Therefore it offers in-transit encryption, but it is still vulnerable to MITM type of attack. Note: the driver itself also supports values

verify-ca

and

verify-full

, but these two modes require passing the trusted CA cert to Dex component as a file and this is not currently supported by our helm chart.