PostgreSQL on Data Management for VMware Tanzu

Supported PostgreSQL Versions

Data Management for VMware Tanzu supports provisioning database Service Instances running these PostgreSQL versions:

10.15.0 and 10.17.0
11.10.0 and 11.12.0
12.7.0

Configuration

When you create a PostgreSQL database Service Instance with Data Management for VMware Tanzu, you configure certain PostgreSQL properties.

Database Instance Configuration

The Database Instance Configuration properties identify the name of the default database, the database server port number, and the database administrator user credentials.

Property Name	Description	Default Value
Database Name	The name of the default database.	PostgresDB
Database Port No	The port number on which the database server runs. (Read-only)	5432
Admin Username	The database administrator user name.	admin
Admin Password	The password for the database adminstrator.	Admin!23Admin

Note: Data Management for VMware Tanzu does not support changing the Admin Password from the console or API. You must change this password using a database client. If you change the password in this manner, the new password is not reflected in DMS.

DB Options Configuration

The DB Options Configuration properties control certain runtime characteristics of the PostgreSQL database. These are:

Property Name	Description	Default Value	Restart Required on Update?
TimeZone	The time zone for the PostgreSQL server.¹	GMT	Yes
max_connections	The maximum number of concurrent connections allowed to the PostgreSQL server. Choose a suitable value based on CPU, memory, and application requirements.	100	Yes
log_connections	Enable or disable logging of connection attempts and successful completion of authentication.	off	No
locale	The language, sorting, number formatting, date/time, currency, etc. preference for the PostgreSQL server.² Note: You can set the `locale` only at database creation time; you cannot set this parameter after you create the database.	Unset The following PostgreSQL `locale`s are available in this release of DMS: C, de_DE.utf8, en_US.utf8, en_US.UTF-8, es_ES.utf8, fr_FR.utf8, ja_JP.utf8, ko_KR.utf8, POSIX, zh_CN.utf8, zh_TW.utf8	N/A

Note: If you want to set a parameter to the PostgreSQL server default, you must remove/clear the entry.

¹ Run the following PostgreSQL query to obtain the possible time zone values: SELECT name FROM pg_timezone_names;

² Be sure to consult the PostgreSQL documentation before you set the locale or related lc_xxx options.

Connecting to a PostgreSQL Database Service Instance

To access a PostgreSQL database Service Instance, the host on which the client application is running must have connectivity to the Application Network configured for the instance.

You can use any SQL client application to connect to a database in your PostgreSQL Service Instance. To connect, you must be able to identify the FQDN of the PostgreSQL server host, the port on which the server is running, and the database name. You must also have the PostgreSQL admin credentials on hand. You can obtain this information from the Data Management for VMware Tanzu console as described in Locating the Database Service Instance Connection Parameters.

Using TLS with a PostgreSQL Database Service Instance

Refer to SSL Support in the PostgreSQL documentation for more information on using SSL/TLS with PostgreSQL.

Note: Data Management for VMware Tanzu does not support verify-full TLS configuration for client applications connecting to a Service Instance.

Requiring TLS

Note: The default SSL/TLS configuration for PostgreSQL on Data Management for VMware Tanzu does not require secure client connections.

You can configure a PostgreSQL Service Instance to require SSL/TLS client connections during creation or after provisioning as follows:

You specify Require Client TLS when you create the Service Instance.
You require TLS by configuring the instance after it is provisioned as described in Requiring TLS-Secured Client Connections.