Merge branch 't35260-force-db-ssl' into 'main'

Force SSL for DB communications | refs #35260

See merge request sys/ansible-public!18

roles/postgres-ha/tasks/main.yml

@@ -18,27 +18,27 @@
     pg_hba:
       - type: local
         method: peer
-      - type: host
+      - type: hostssl
         address: 127.0.0.1/32
-      - type: host
+      - type: hostssl
         address: ::1/128
-      - type: host
+      - type: hostssl
         address: 0.0.0.0/0
-      - type: host
+      - type: hostssl
         address: ::/0
       - type: local
         database: replication
         method: peer
-      - type: host
+      - type: hostssl
         database: replication
         address: 127.0.0.1/32
-      - type: host
+      - type: hostssl
         database: replication
         address: ::1/128
-      - type: host
+      - type: hostssl
         database: replication
         address: 0.0.0.0/0
-      - type: host
+      - type: hostssl
         database: replication
         address: ::/0
     pg_conf:

roles/postgres/defaults/main.yml

@@ -18,17 +18,17 @@ pg_conf:
 pg_hba:
   - type: local
     method: peer
-  - type: host
+  - type: hostssl
     address: 127.0.0.1/32
-  - type: host
+  - type: hostssl
     address: ::1/128
   - type: local
     database: replication
     method: peer
-  - type: host
+  - type: hostssl
     database: replication
     address: 127.0.0.1/32
-  - type: host
+  - type: hostssl
     database: replication
     address: ::1/128