puppetlabs/puppetlabs-postgresql

pg_hab_rule allows any kind of data for address parameter

tuxmea opened this issue · 0 comments

Describe the Bug

According to PostgreSQL documentation there are only specific data possible for address:
https://www.postgresql.org/docs/current/auth-pg-hba-conf.html

IPV4 CIDR
IPV6 CIDR
FQDN
the strings 'samenet' or 'samehost'
a domain
a domain with a starting dot

Expected Behavior

When providing an illegal parameter, I want the catalog compilation to fail

Steps to Reproduce

Add a parameter like '/12' without IP.
Puppet will add the data to pg_hba_rules file and postgresql service will fail to start.

Environment

Any version, all platforms.