How to configure x509 based authentication/authorization against Pooler/Bouncer/PG-instance

[ayashjorden]

Please, answer some short questions which should help us to understand your problem / question better?

• Which image of the operator are you using?
  • ghcr.io/zalando/postgres-operator:v1.13.0
• Where do you run it - cloud or metal? Kubernetes or OpenShift?
  • Kubernetes
• Are you running Postgres Operator in production? [yes | no]
  • Yes
• Type of issue? [Bug report, question, feature request, etc.]
  • Question/Documentation

To improve the security posture of our PG deployment, we would like to enable and configure Certificate Authentication.
I was able to find encryption related docs, but not how to configure Pooler/Bouncer or the PG-instances to enable authenticating/authorizing clients based on their x509 certificates.

Please advise,
Thank you