Skip to content

Conversation

@ivanauth
Copy link

This adds documentation for the datastoreTLSSecretName configuration option, which was previously undocumented.

The operator mounts TLS certificates at /spicedb-db-tls, but users had to dig through the source code to figure this out. Now there's a clear example showing how to create the secret and reference the mounted certificates in the datastore_uri connection string.

Fixes #170

Adds comprehensive documentation for configuring datastore TLS certificates
using the datastoreTLSSecretName configuration option.

## Changes
- Add main README section explaining TLS certificate configuration
- Include example for PostgreSQL/CockroachDB with TLS
- Document certificate mount paths at /spicedb-db-tls
- Add TLS configuration section to cockroachdb-tls-ingress example
- Fix markdown lint errors (list numbering and spacing)

Fixes authzed#170
@ivanauth ivanauth force-pushed the document-datastore-tls branch from 295195f to 9fb24aa Compare November 26, 2025 04:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Document volume mount path for datastoreTLSSecretName

1 participant