feat(deployment): enable SSL during migration (#267)

Signed-off-by: Miguel Martinez Trivino <miguel@chainloop.dev>

Author: migmartri

deployment/chainloop/Chart.yaml

@@ -4,7 +4,7 @@ description: Chainloop is an open source software supply chain control plane, a
 
 type: application
 # Bump the patch (not minor, not major) version on each change in the Chart Source code
-version: 1.9.0
+version: 1.9.1
 # Do not update appVersion, this is handled automatically by the release process
 appVersion: v0.14.0
 

deployment/chainloop/templates/_helpers.tpl

@@ -182,7 +182,8 @@ Return the Postgresql connection string
 Return the Postgresql connection string for Atlas migration
 */}}
 {{- define "controlplane.database.atlas_connection_string" -}}
-{{- printf "postgres://%s:%s@%s:%s/%s?sslmode=disable" (include "controlplane.database.user" .) (include "controlplane.database.escapedPassword" .) (include "controlplane.database.host" .) (include "controlplane.database.port" .) (include "controlplane.database.name" .) }}
+{{- $connStr := printf "postgres://%s:%s@%s:%s/%s" (include "controlplane.database.user" .) (include "controlplane.database.escapedPassword" .) (include "controlplane.database.host" .) (include "controlplane.database.port" .) (include "controlplane.database.name" .) }}
+{{- .Values.controlplane.migration.ssl | ternary $connStr (printf "%s?sslmode=disable" $connStr) }}
 {{- end -}}
 
 {{/*

deployment/chainloop/values.yaml

@@ -113,6 +113,8 @@ controlplane:
       repository: ghcr.io/chainloop-dev/chainloop/control-plane-migrations
       # Overrides the image tag whose default is the chart appVersion.
     # tag: latest
+    # Run the migration job forcing SSL, required in AWS RDS for PostgreSQL 15
+    ssl: false
 
   ## @skip controlplane.serviceAccount
   serviceAccount: