Not just for rockets anymore
summary
Describes integrating Let's Encrypt (ACME) into postgresql.org infrastructure to automate TLS certificate lifecycle and eliminate manual certificate management. Covers how ACME/Let’s Encrypt was used within PostgreSQL infrastructure management to achieve zero manual work for certificate issuance and renewal.
AI-written summary · about
chapters (13)
- 0:00Start
- 2:47The environment
- 6:07The challenge
- 8:18The dark ages
- 11:01Enter ACME
- 20:56New set of problems
- 22:48ACME in pginfra
- 31:55What does it look like?
- 36:46Central integration
- 42:55Certificate deployment
- 45:57Certificate renewal
- 46:41Rate limits
- 48:59Conclusions
related talks
25mSSL All The Things
39mA Walk Through the Land of
15mCertificates in Kubernetes
26mSSL all the things
48mAdvanced Authentication and Encrypted Connections
38mImproving the SRE Experience for 10 Years as a Free, Open, and Automated...
38mPostgreSQL and DevSecOps: Ensuring database security
22mACME: Certificate management has never been easier