Mike Reeves 868cd11874 Add so-postgres Salt states and integration wiring ...

Phase 1 of the PostgreSQL central data platform:
- Salt states: init, enabled, disabled, config, ssl, auth, sostatus
- TLS via SO CA-signed certs with postgresql.conf template
- Two-tier auth: postgres superuser + so_postgres application user
- Firewall restricts port 5432 to manager-only (HA-ready)
- Wired into top.sls, pillar/top.sls, allowed_states, firewall
  containers map, docker defaults, CA signing policies, and setup
  scripts for all manager-type roles

2026-04-08 10:58:52 -04:00

..

files

Add so-postgres Salt states and integration wiring

2026-04-08 10:58:52 -04:00

init.sls

fix allowed states for ca

2025-12-12 18:23:29 -05:00

map.jinja

the great ssl refactor

2025-12-11 17:30:06 -05:00

remove.sls

only allow ca.remove state to run if so-setup is running

2025-12-17 10:08:00 -05:00

server.sls

import allowed_states

2025-12-12 18:50:37 -05:00

signing_policy.sls

the great ssl refactor

2025-12-11 17:30:06 -05:00

trustca.sls

Remove non-Oracle Linux 9 support from salt states

2026-03-16 16:58:39 -04:00