Configuring .pgpass

TPA creates ~postgres/.pgpass by default with the passwords for the postgres_user (postgres or entreprisedb by default depending on the postgres_flavour ) in it, for use between cluster instances.

You can set pgpass_users to create entries for a different list of users. Note that the pgpass_users list overrides default values, so the postgres_user (postgres /enterprisedb ) is NOT included unless you explicitly include it in the pgpass_users list.

You can also include the postgres/pgpass role from hook scripts to create your own .pgpass file:

- include_role: name=postgres/pgpass
  vars:
    pgpassfile: ~otheruser/.pgpass
    pgpass_owner: otheruser
    pgpass_group: somegroup
    pgpass_users:
    - xyzuser
    - pqruser