From a7d008d557074d0f1562ce848cedeb87bf44af07 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 12 Sep 2022 15:04:22 +0000
Subject: [PATCH 1/4] chore(deps): bump github.com/lib/pq from 1.10.6 to 1.10.7

Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.10.6 to 1.10.7.
- [Release notes](https://github.com/lib/pq/releases)
- [Commits](https://github.com/lib/pq/compare/v1.10.6...v1.10.7)

---
updated-dependencies:
- dependency-name: github.com/lib/pq
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index 68396a158426..b1c9b5b5f260 100644
--- a/go.mod
+++ b/go.mod
@@ -30,7 +30,7 @@ require (
 	github.com/kelseyhightower/envconfig v1.4.0
 	github.com/kumahq/kuma-net v0.6.0
 	github.com/kumahq/protoc-gen-kumadoc v0.3.1
-	github.com/lib/pq v1.10.6
+	github.com/lib/pq v1.10.7
 	github.com/miekg/dns v1.1.50
 	github.com/natefinch/atomic v1.0.1
 	github.com/onsi/ginkgo/v2 v2.1.6
diff --git a/go.sum b/go.sum
index eabd7453307b..9e7b981eca8a 100644
--- a/go.sum
+++ b/go.sum
@@ -1031,8 +1031,8 @@ github.com/lib/pq v1.3.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.8.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/lib/pq v1.10.0/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/lib/pq v1.10.4/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-github.com/lib/pq v1.10.6 h1:jbk+ZieJ0D7EVGJYpL9QTz7/YW6UHbmdnZWYyK5cdBs=
-github.com/lib/pq v1.10.6/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
+github.com/lib/pq v1.10.7 h1:p7ZhMD+KsSRozJr34udlUrhboJwWAgCg34+/ZZNvZZw=
+github.com/lib/pq v1.10.7/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de/go.mod h1:zAbeS9B/r2mtpb6U+EI2rYA5OAXxsYw6wTamcNW+zcE=
 github.com/linuxkit/virtsock v0.0.0-20201010232012-f8cee7dfc7a3/go.mod h1:3r6x7q95whyfWQpmGZTu3gk3v2YkMi05HEzl7Tf7YEo=
 github.com/lithammer/dedent v1.1.0/go.mod h1:jrXYCQtgg0nJiN+StA2KgR7w6CiQNv9Fd/Z9BP0jIOc=

From 4105f1603b4cb92d17fe1b071fe71946521d63ed Mon Sep 17 00:00:00 2001
From: Mike Beaumont <mjboamail@gmail.com>
Date: Wed, 14 Sep 2022 12:33:54 +0200
Subject: [PATCH 2/4] test: set SAN in test postgres certs

Signed-off-by: Mike Beaumont <mjboamail@gmail.com>
---
 tools/postgres/certs/generate.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/postgres/certs/generate.sh b/tools/postgres/certs/generate.sh
index 015be751ae4b..59c5f5410c1f 100755
--- a/tools/postgres/certs/generate.sh
+++ b/tools/postgres/certs/generate.sh
@@ -8,4 +8,4 @@ openssl x509 -req -in postgres.client.csr -CA rootCA.crt -CAkey rootCA.key -CAcr
 
 openssl genrsa -out postgres.server.key 2048
 openssl req -new -sha256 -key postgres.server.key -subj "/C=US/ST=CA/O=MyOrg, Inc./CN=kuma-server" -out postgres.server.csr
-openssl x509 -req -in postgres.server.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out postgres.server.crt -days 5000 -sha256
+openssl x509 -req -in postgres.server.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -extfile <(printf "subjectAltName = DNS:localhost") -out postgres.server.crt -days 5000 -sha256

From 44b296382d27609c27596ebadb6934e44d94d0d9 Mon Sep 17 00:00:00 2001
From: Mike Beaumont <mjboamail@gmail.com>
Date: Wed, 14 Sep 2022 12:34:23 +0200
Subject: [PATCH 3/4] chore: regenerate test postgres certs

Signed-off-by: Mike Beaumont <mjboamail@gmail.com>
---
 tools/postgres/certs/postgres.client.crt | 40 +++++-----
 tools/postgres/certs/postgres.client.csr | 24 +++---
 tools/postgres/certs/postgres.client.key | 50 ++++++------
 tools/postgres/certs/postgres.server.crt | 45 +++++------
 tools/postgres/certs/postgres.server.csr | 24 +++---
 tools/postgres/certs/postgres.server.key | 50 ++++++------
 tools/postgres/certs/rootCA.crt          | 56 +++++++-------
 tools/postgres/certs/rootCA.key          | 98 ++++++++++++------------
 tools/postgres/certs/rootCA.srl          |  2 +-
 9 files changed, 196 insertions(+), 193 deletions(-)

diff --git a/tools/postgres/certs/postgres.client.crt b/tools/postgres/certs/postgres.client.crt
index aaaa6b247c9f..fddcd2e7ca31 100644
--- a/tools/postgres/certs/postgres.client.crt
+++ b/tools/postgres/certs/postgres.client.crt
@@ -1,24 +1,24 @@
 -----BEGIN CERTIFICATE-----
-MIID/TCCAeUCCQDi5MgMK45WdDANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJV
+MIID/TCCAeUCCQDi5MgMK45WgDANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJV
 UzELMAkGA1UECAwCQ0ExFDASBgNVBAoMC015T3JnLCBJbmMuMRAwDgYDVQQDDAdr
-dW1hLWNhMB4XDTIxMDQyMDEzNDAxMVoXDTM0MTIyODEzNDAxMVowPzELMAkGA1UE
+dW1hLWNhMB4XDTIyMDkxNDEwMzQwNVoXDTM2MDUyMzEwMzQwNVowPzELMAkGA1UE
 BhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQKDAtNeU9yZywgSW5jLjENMAsGA1UE
-AwwEa3VtYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMqRNQ7qsRq
-Be4o6uFL/L4LDvnptPzjflSY25Ho8l8I8HBWgH7GgxPThgOQel/CXH3cGuJ+Q9US
-0u/hpebB490gOHCFH2lQ2T9idlDevozR8bP2Ueu9erao4BVFsY1Zsrcupp5LECok
-FAET6G4tRg0+ZgyNWLD0PJrt1pzofIgOLZiXha6ld7UbOg/9K3FlESu1Cbk1+PY2
-Jmp/b15CQrbThwgmfRnn1ouUGRfFO1JDIEhEjyw36IOVekYFfoZ3vLzsTgLdcJJq
-5H3J8KoAkn6obWV/SP02lXd29Arv9iwktgPncgSihuLpW3s3t5WIgzfoCmlsFqD/
-60pMkgZKOuUCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAdKqS1o2HlOdzDeHr5HNO
-Oh4JdoKD4MP4fsgBbGxtvS1gHQlW7u9aJsPIhvsAAa7JAJCJ6pnr25gRG7xrkpVK
-Zijn7v9iZDlDcAjZOBmuyD/W1YBFfdLu0Y9ctWro/YagOXBTzNRGJDBW9dAf66Te
-vzyWMsUFn4dLQGYKMW/CDffKRBuLN1CgBz+hTs0GwkFoiBxTEqEsSYY3bBk+or6E
-e2YqVpKxKSwE8vbVMjza7f6MXEoxrAV1uAiPAwcDXxVvsVVapslRgsXhF1QvlmRg
-BZLpPro1S3cWIqRT7COV6sVPTZvzoAHyNzRSa7FsEvnte7NGbX4NTrSY65WMnO+b
-vGLB//o9Q4yAu9h2GjtOjoOIjWcubxGglWocfRRiiB5RaHQ1iqtwxM+pczuYIwBs
-qTrNw2whEsOzr2WP9Aq572AUZJM2IWS0W4QpyDyz2E8YIbZJs1ZMUgRm7gQwTiB3
-C73QJi0YMOl4jsJaOg8JXyd/rNqpiI8ThUBB03EEVNdH2vR4/E0IYWRgOv36OMi6
-WWFyNBK1e9SLqLzb6JXT77Bkj3WHyifBhSHwAkelg2Y9SAfkJaCaMmVWrjcmKbSU
-XDKaKQKyR4RyrqH4/uK1CbFF+kxo0cjXpZsvenbcOix266knItTmu6OxyYvr4yvp
-WkXXZ1zt1toh8ylpqGsgxLc=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 -----END CERTIFICATE-----
diff --git a/tools/postgres/certs/postgres.client.csr b/tools/postgres/certs/postgres.client.csr
index 885f013f292e..f63af7f68588 100644
--- a/tools/postgres/certs/postgres.client.csr
+++ b/tools/postgres/certs/postgres.client.csr
@@ -1,16 +1,16 @@
 -----BEGIN CERTIFICATE REQUEST-----
 MIIChDCCAWwCAQAwPzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQK
 DAtNeU9yZywgSW5jLjENMAsGA1UEAwwEa3VtYTCCASIwDQYJKoZIhvcNAQEBBQAD
-ggEPADCCAQoCggEBAMMqRNQ7qsRqBe4o6uFL/L4LDvnptPzjflSY25Ho8l8I8HBW
-gH7GgxPThgOQel/CXH3cGuJ+Q9US0u/hpebB490gOHCFH2lQ2T9idlDevozR8bP2
-Ueu9erao4BVFsY1Zsrcupp5LECokFAET6G4tRg0+ZgyNWLD0PJrt1pzofIgOLZiX
-ha6ld7UbOg/9K3FlESu1Cbk1+PY2Jmp/b15CQrbThwgmfRnn1ouUGRfFO1JDIEhE
-jyw36IOVekYFfoZ3vLzsTgLdcJJq5H3J8KoAkn6obWV/SP02lXd29Arv9iwktgPn
-cgSihuLpW3s3t5WIgzfoCmlsFqD/60pMkgZKOuUCAwEAAaAAMA0GCSqGSIb3DQEB
-CwUAA4IBAQCRn46pFUAiMELEWkLgD4AZkKgpfTkG0VXRar4AiZPHKKfBI/qq1oGv
-xNL8v9eHrQ5xrYVm1YntnQ6oXNGGUl/v2dqC615ZA5ykUepaa+d1BPkjz4+dbnsF
-M+lpsKF3Ezz4bXUIccG/Ha6w4A8kXHffYGScHz0gkmiptgwG4K1EIJ69XGmqHJe5
-4fJgcG+WtJles90S+BQ8knB0mN0sDjk8WxvzgkhPBcuFcuzWyVT0f+ufyI8hHiXy
-JXFhXvKrR2Cd+mBYN+9NOAv/4Vg8ypPeMKcx3A+RtxArVwjif8KwWy2vrmF7yeLW
-AiFqWIpeYTxL6gGwgiAZQwNSaAwV+Me7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 -----END CERTIFICATE REQUEST-----
diff --git a/tools/postgres/certs/postgres.client.key b/tools/postgres/certs/postgres.client.key
index e4dd1fcacb5c..69d38bc50aed 100644
--- a/tools/postgres/certs/postgres.client.key
+++ b/tools/postgres/certs/postgres.client.key
@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEAwypE1DuqxGoF7ijq4Uv8vgsO+em0/ON+VJjbkejyXwjwcFaA
-fsaDE9OGA5B6X8Jcfdwa4n5D1RLS7+Gl5sHj3SA4cIUfaVDZP2J2UN6+jNHxs/ZR
-6716tqjgFUWxjVmyty6mnksQKiQUARPobi1GDT5mDI1YsPQ8mu3WnOh8iA4tmJeF
-rqV3tRs6D/0rcWURK7UJuTX49jYman9vXkJCttOHCCZ9GefWi5QZF8U7UkMgSESP
-LDfog5V6RgV+hne8vOxOAt1wkmrkfcnwqgCSfqhtZX9I/TaVd3b0Cu/2LCS2A+dy
-BKKG4ulbeze3lYiDN+gKaWwWoP/rSkySBko65QIDAQABAoIBAAU/Q655FDRHrXUj
-wHziMB9j6LkrYWRTMXhQy8Z2ft2zPdOnX7kI2UlVLIs3/TJJ5Xa0zjw8rNIzuVwd
-svorSFcPoLTVv2xzcgPUP94YvwLGOjteagFujLgQfkXUI9vrB3UJWg1zczHO2oLU
-6DDeIr4EaXX47uODDYYU0upRDdgSjX3X4//2LTrdUVlEd2jLAmhecf5BDsUtQVnQ
-iaYITKkVA2EI083Qc1p3MaOmjHhK906IuWROTfihS+9r+/BXJKmWMv3tLpbofNNo
-TyTIGbLE08qS1ZeQu63Lqyu2Qj50kEMbn0hxUpnDBEFWCssmn6cJwPX9TMqcGBje
-7mQGMcECgYEA455qKPXc1xaeU/NFSNJnVyMs4jt/zdld2huH5LXM9lh+73VTHP7R
-uDrPHW0M1NGYfy2NnygJmma5ujziXlp8aJF8MK2ymd5mYgWnIznJVIhZvFxKU7H5
-yudTrleJLQyxsi4OURwZroPjbBLRe5OcyLmaTPFKTI9QJWRhtKpT9z0CgYEA23/u
-6RfHAFvdoXNWcWcjnjpjMrjWRho52x4qeI8vdW4RsSM2oa70PdsBaILiOev42mvI
-F60NI41rNscwAQhfuS9hgGbeDQdB3EX90aN3rko1VG2oANvmBJocvTf9BXWiRmz3
-Sr4FpH2W7nwdkiLXRXBxMN3L9IG4raPOfshDTMkCgYBZzgmyiXaNQjZLhwLB/Yma
-Pp2Z0MHW9LjrscsG+JeaZkYGsjKNkRgraMCIqprSaLOTEeT7c29+hKMokJb7hRXq
-p+PozM9XmACrEfHkmwsNGBLXl04YAXM9k9FXSuArbwO4+iTZ6Y1UZmLXJAGUkSPd
-qiTv0I9w72Y+qoFGJ6GjPQKBgQChmshQLyRhvEEpzBwZtCECLuS4BGQmCssL62LD
-jlAXuikmbNGdKo1COUsJIkvi7zwxu+b+n3cr9MO5+d7686peUmcLvTDBENXJknJ0
-dVD5LkOjXHSz5TKtsrV0DpOoAFqwVSugiNTorVqBTToMTMCHrGh53OJ7q0JH/XFb
-4J/EGQKBgAIWm0VGYKKIbkvY3QBmB05lQd2N3SsbPe4+kH1QnFfZa46A5MtszNXS
-uM6F1fhx/YYGJfHGKypmONsWHVV1Ct2YIs+JTE20DhLoGBvKj3rPN3EbhfUgf3kJ
-8wD+3Glr0INrkH86mdK2cP2nOECVGZb7ltMkxG0xPCVv7qqx/x2r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 -----END RSA PRIVATE KEY-----
diff --git a/tools/postgres/certs/postgres.server.crt b/tools/postgres/certs/postgres.server.crt
index e0f48da27a04..d1df673d6652 100644
--- a/tools/postgres/certs/postgres.server.crt
+++ b/tools/postgres/certs/postgres.server.crt
@@ -1,24 +1,25 @@
 -----BEGIN CERTIFICATE-----
-MIIEBDCCAewCCQDi5MgMK45WdTANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJV
-UzELMAkGA1UECAwCQ0ExFDASBgNVBAoMC015T3JnLCBJbmMuMRAwDgYDVQQDDAdr
-dW1hLWNhMB4XDTIxMDQyMDEzNDAxMVoXDTM0MTIyODEzNDAxMVowRjELMAkGA1UE
-BhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQKDAtNeU9yZywgSW5jLjEUMBIGA1UE
-AwwLa3VtYS1zZXJ2ZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ
-FVjfQTg9kTY2xBIFGnMFwSxdEEAM4i/WG0XNBe2ogTwb1STBlt7HKFMQt1YgjJNt
-v9ePPmQ/DTqfE9/6ru6Q1PlLxofWGnDdTkrrRbFzK2m+zHQKpIzCaaADmzIVerm5
-4eGHF0aMV4XyCHGQG6VwltyIHrnWgKNPOk6dLdX9BeKZMFy5CYrnYdbmvmCV4Axs
-/m++MdwcaTYA9IlLnylpk8FG2ks0kHRrJtBLZbgS7FuDsWqOiigDxLvWtsnImiUe
-lfeH01qBviaYc8qWZn1BiqaxGNq9LSmHu0A13NBi2GX89LrOGEVDZqXZiQZd+1QU
-Bu4Hr+jdr519gDst+55/AgMBAAEwDQYJKoZIhvcNAQELBQADggIBAFOcPwpCiMHB
-MrGqQZ10FQrXMgTu1LBF5/h+21mYBGLawaqJJ6vXjaTMp/Jnxet6gDEsoYoJtd0K
-Pk6dwdduPcauv+Enp8LFoBBJBGHJFuNQEt1GumFoy5tECjmIjfA8c4gBo9fQdiMY
-yUNVWBuKc1Cds545zbzb8kfDzjDi/mD6piyKJ7xoq8FBDyotvJBUoy+QN60rQTgB
-qLqLEUmw1+KrrYbJ76oUH/7+icIXqf9DcSr5kL/bUiQ1GPaiF/plv7nRGvGeMLB5
-dm6Uv2LH1QDxp8rdCTjl08oCTBrCLwHfR2gOxtyeHmSTjDumO7HqXKx83yz2QkEf
-0UJSBsxKygPpPmiXqBxJwEb1j3gJ3njLJjV/piz1kt6x3rFiueFWvyF7MMKZYxwT
-L4sJbHyutqtaD6zmBVmzfmOuLiRDoZ9ewu9Y/d7h+iAEJ4Mb6mfROSM95I+tYYyH
-RNygDVJ3Kyv0rJ7pr0EGMqWw8s/Bvr2DiG5IZlv5IhcOY8Sbp8MfIFhprK5BlJNZ
-sHbdRv3M5wSCUyKD2OzFI6mFHKCw0YaTFGmb9FQROgie5K4vTlFx+rlF5ALDvBS/
-82r19fQGqE+n4dwa5zql4KkPRsVkWn4nDrEtCTIt7a9ZcvCu/1DldI2eS80Tsqbm
-/CZ/HYvCfP8aJ6/Q8BgLBsaWSOzLmmzE
+MIIEIzCCAgugAwIBAgIJAOLkyAwrjlaBMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNV
+BAYTAlVTMQswCQYDVQQIDAJDQTEUMBIGA1UECgwLTXlPcmcsIEluYy4xEDAOBgNV
+BAMMB2t1bWEtY2EwHhcNMjIwOTE0MTAzNDA1WhcNMzYwNTIzMTAzNDA1WjBGMQsw
+CQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFDASBgNVBAoMC015T3JnLCBJbmMuMRQw
+EgYDVQQDDAtrdW1hLXNlcnZlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+ggEBANlF5HEpLQuC+wvSdHT4wekADUjzFUe2kVVZ9q6PkBKOvqwO2Lps1wB7yWZz
+a1nRZ3Yh3di2xwXo5+CUjMG3Tvcec83Vakxn9MD4TTyD6pWm+5VnDkowMyYngB1e
+KqfePACFKDKmkOx1pBC41uWrHHbBRSeajOx6u5Z8TnUwoLJeFcLU05NWvptkrbrl
+PwABAoLfZPBltFMuKFuen4QPZoZYXhPMVnESRn0kUW375oJETL3+BrWSNbFyR3hY
+5E6Lppzw0EwIhZV4FJYWuzT7Wz/P3jOz3PTCgGMQcwRLyhuInIIDJCQGC3RtvLw7
+zGasJVR/X5NNfrK5PvMAQqUszEcCAwEAAaMYMBYwFAYDVR0RBA0wC4IJbG9jYWxo
+b3N0MA0GCSqGSIb3DQEBCwUAA4ICAQBkjya+rgxwZElxN1wDZWokrBZY8q6fN7lm
+epHZMZJbhxbXqfC+b300Jh3yDYHFcBOdK8Ts85yycWmr+yq6r9Mri38S402QWO2V
+a0kAlPIPRubGxNoMq/JY59UD/wNW/M+SXhmmT/FgJLuf7J59CggYImM9dzqOTfJQ
+az0C14Rxtf7Xyk+Mwwt12XlsWILASAfM7cxi144b5U1b0dTHmgE6QR4a31Zw94Gu
+u9LK9QKDdzrIZ8+zOoxnrE6VOzQTKmz30v5elILatKkoQofWEvluIUNAjvnjS/Ei
+H5SjQziifs3pQp3vul3lNCOTr4qm4HGQKzsWzw6St1sCNGHkCAhRGA9K0EcMqllg
+CLG19toWchX8W7ngMTOVkjPZvg8wg/rqQuLPSj6BRkIsbpIBDyQ8mejWHUqapPgT
+RPuSnZ0Eb+DnbgEcOl/Du7Zs87TvtP92vWu3jiDctQsBu2x4CUISrpq+LH6gQi9R
+NlSomqWNQIetmcXkWkXY9dWPPAGVRTIogNluHaQUAY4hONOFowHpGr9L/IrpltR8
+T4ucnjmFohyGJ3MbgDneN0YhgIYubJLXvoB6wdFsDVVR4iG2JgZrDN9Sha4B7Eo9
+XXHgmOXXOqwy1SBoVR6uIB0Hn1Z/7rylLX4/SK/c6gH2Nh+8g4TUt5bCSbL0wWdx
+6FVYnii65g==
 -----END CERTIFICATE-----
diff --git a/tools/postgres/certs/postgres.server.csr b/tools/postgres/certs/postgres.server.csr
index e297779e508b..64f15c92958f 100644
--- a/tools/postgres/certs/postgres.server.csr
+++ b/tools/postgres/certs/postgres.server.csr
@@ -1,16 +1,16 @@
 -----BEGIN CERTIFICATE REQUEST-----
 MIICizCCAXMCAQAwRjELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQK
 DAtNeU9yZywgSW5jLjEUMBIGA1UEAwwLa3VtYS1zZXJ2ZXIwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQDZFVjfQTg9kTY2xBIFGnMFwSxdEEAM4i/WG0XN
-Be2ogTwb1STBlt7HKFMQt1YgjJNtv9ePPmQ/DTqfE9/6ru6Q1PlLxofWGnDdTkrr
-RbFzK2m+zHQKpIzCaaADmzIVerm54eGHF0aMV4XyCHGQG6VwltyIHrnWgKNPOk6d
-LdX9BeKZMFy5CYrnYdbmvmCV4Axs/m++MdwcaTYA9IlLnylpk8FG2ks0kHRrJtBL
-ZbgS7FuDsWqOiigDxLvWtsnImiUelfeH01qBviaYc8qWZn1BiqaxGNq9LSmHu0A1
-3NBi2GX89LrOGEVDZqXZiQZd+1QUBu4Hr+jdr519gDst+55/AgMBAAGgADANBgkq
-hkiG9w0BAQsFAAOCAQEAOhoLVW+HwTKwaY8RxLyXJUZZckVpffsbu3LDY7TjCy15
-LindTXAZbbIe4g8Ne8SeA+pLEZsvjUdFvxrAm+nIYOHDlIxslPns8azHl9K/emky
-cG2I/0iKqZMNf8xjPojxWmFkqUP9pNkbLWZRKRVO3watKCoxqyFIqusORfwOkdVk
-2K7qjg6Dn682rnKxLrtjUM2ZQHsU8MRNNr7lnxAJR21+8cULSJhFFTO1J2MVP33v
-B9psjxD5IUmxFZzZa8nqWrJW1Hk82YNHKyeW82gn8e/149YLaRHiMzn/3vZomibD
-5YPuRkiSxXk0UqX0GtG1FYHhLTItZ3YJINDn4d0nZg==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 -----END CERTIFICATE REQUEST-----
diff --git a/tools/postgres/certs/postgres.server.key b/tools/postgres/certs/postgres.server.key
index b32bb81f662a..e85bbf9dfc0a 100644
--- a/tools/postgres/certs/postgres.server.key
+++ b/tools/postgres/certs/postgres.server.key
@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEA2RVY30E4PZE2NsQSBRpzBcEsXRBADOIv1htFzQXtqIE8G9Uk
-wZbexyhTELdWIIyTbb/Xjz5kPw06nxPf+q7ukNT5S8aH1hpw3U5K60Wxcytpvsx0
-CqSMwmmgA5syFXq5ueHhhxdGjFeF8ghxkBulcJbciB651oCjTzpOnS3V/QXimTBc
-uQmK52HW5r5gleAMbP5vvjHcHGk2APSJS58paZPBRtpLNJB0aybQS2W4Euxbg7Fq
-joooA8S71rbJyJolHpX3h9Nagb4mmHPKlmZ9QYqmsRjavS0ph7tANdzQYthl/PS6
-zhhFQ2al2YkGXftUFAbuB6/o3a+dfYA7LfuefwIDAQABAoIBAQDTmRxEmaUBVi8b
-GOlbshlWDaJ5oCJerIbmUzUpkFLEwhveIVevn6jNRgAZtisslPoLq0ipZq5+Sx3N
-+6iCCMufvwi1FPJI/wLupKcgR5Gdaj6r7UxbJ2PRCPYhLcCW8UZh6sxTSpvIpnN4
-pURUrK4JXfPedty8Oi11R6djTE9eTfehlQIjT5bHwrg2p8jHoNyEc3Cr1IHLxIHv
-+TwULo2dacqH0NjV4NvE4lKxKafbEJ6g1Wrcc++mr+f04mZtbnKaMkzajTs18Qfw
-/X8TROkJ4h09076SoHRawo0MUvDIS8S0ukwttuvmLt1C2xl2R+Kw8zKrmhsG3st2
-NgeUrcpJAoGBAO731GiKRsFcxus/NScMP0ZIGrS1sa/eIUEIqrwLAdlezE4XbJ04
-rDwE2EzBwNnfpqibaAMMsMYTE34EHur5btEP99jkkH7K6HPg/7N/Fgfwntj6OrjC
-6aEkI8qi6H7idT46qEbyPjl1NLLVJKcUxc4rlDk0RFivg+oa6RwseieTAoGBAOiO
-NomSNwPYLOZqSkgv7DOgXQL5UNOHe+YPaynhA6PGIDYRtza4I4Px9Dg5Q+IxXOES
-RtEVhDtZltNn1VPOtoDEAd96FZItQQSkD0ZEidb4cq+VIQgRZARqLyyULTtU0vmn
-v8+6xROgqM30D23Sz8EDuiw5g9BT5ccCdB7xY+jlAoGAF1nYQ67fYx2xwmMWyo4D
-0NZS5b2rc0f9b+Fs7ZsVvyvoQuk/D83t5p+Ck12Lfr7ABlHJRCMFUxWiHfpBGyzs
-izlIOsV66SjithASbHPKr1Pv8bvh6RQCyGBDrxVkKqHuWvpYXzZkpjCxyZfSURFS
-kubnQP++ffwIo+OlS7984EkCgYEAlCmXAYsQVfiykpKBhQBTQokW+UASiNI209pa
-8jGT+hHOj+Q1kD09E2FhsTh60W+VtyfHyook1xM7DrGGroByshMvBkxn1dvTIrvL
-p38fOsDLgKZIhzVdPZrRN1uofbaLO9fuUtCxotGm+qBV/ChliJlxUZ/LJT1ulZ4w
-kU5F0ykCgYBw1+ovhy2Gd8TqnIyoC74Y3BAtp95HxgGRPsQyjEIve8t4AtA7t1th
-OvoEcmfIY+0piMZxpIlpb4MdKUQ/yQdyfkRE6Y1NDzaf1MkKoYWlVOUNRpFsDyNX
-QihwexZ8+/+b+bEKXAKAEz/nSE90oLWDiVvX7JS5Wj3hj5xgHb+xOw==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 -----END RSA PRIVATE KEY-----
diff --git a/tools/postgres/certs/rootCA.crt b/tools/postgres/certs/rootCA.crt
index 1eda19e8a1ed..8bee9e155650 100644
--- a/tools/postgres/certs/rootCA.crt
+++ b/tools/postgres/certs/rootCA.crt
@@ -1,29 +1,31 @@
 -----BEGIN CERTIFICATE-----
-MIIFADCCAugCCQDElZ9riOE2gjANBgkqhkiG9w0BAQsFADBCMQswCQYDVQQGEwJV
-UzELMAkGA1UECAwCQ0ExFDASBgNVBAoMC015T3JnLCBJbmMuMRAwDgYDVQQDDAdr
-dW1hLWNhMB4XDTIxMDQyMDEzNDAxMVoXDTQ4MDkyOTEzNDAxMVowQjELMAkGA1UE
-BhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQKDAtNeU9yZywgSW5jLjEQMA4GA1UE
-AwwHa3VtYS1jYTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANzZBqcK
-3Ga2gMlobG/mvgcnSPQyoINYLeKsqZ2Oy87MwwOOTyGKtojRK1bNLyz+aN54oytd
-kvRAXBh36E37iO0txStZhYddTENT9LH21L7VGmH0tk0VMeqoL+3Cc+/x0C6LT8kQ
-Q95EOaYg3uS/FhvHJPKhMkHxTZvU5xr2G9S3V0+Nf+/DqE0r6cwZOTPtjnYvYoLx
-Gd1tWyNncFR3m6bvulISuX9eiDmQZ/pRdUhdvhwObaFsHm2asZssl8Zc4srWyduB
-Vk8Q9Z+kYKPpvOzxt+TiJ70uUrLM4zXiqfjE/0nZBcSlaxxpCcrr1ZrNsm3yfYDx
-9x+H5qPjgMm6Xz9ySzpTxExoxh8mnSQGoFGOgv6lE5kndGv2JlbY0cz8HC2+8ZcR
-8nvrJgf68mN6qaqW2qTF+CSKAsf6608Mu/e1Yg/PrKGMVwC5u9L4Dx+o/p5HwCuN
-oKuAwlr6gi+xuO/zx3IzKpQdjhgSSw/Z5mffsVSP/OrEK0d7/xmMrY/x3Wcl924B
-xv98B+6sBUpypyKor15gD9ckWbB/Dv0M0jxnNgjR1XpyfigbuGlEh7Jq4/V2NW4R
-IsngbdenPtx03NX04gU4b38e391aihkCbMYjlyoXvh2VyMduoUhBzzaMpyvDR99e
-wpRiaicHebhqQV2ifm+U6hDBbDb8bKno+WhZAgMBAAEwDQYJKoZIhvcNAQELBQAD
-ggIBADkaXpXNmIUAf5sBMXZ1Kcl1AEqZ+A7Gt9v3YF7U+cMX136q2jhPp1Xdpvfh
-0x9+ghOSLGY0Df8kB20CjxoFUpTba9iW0iEuiv9BFmR1VfHQ/845HETA1HT2L4dC
-1B9NVRuaS+LlsgiB3+zkOjkzFyUUo2SiSQnzYm5h5z8oOR/qSAP0r0LX21qFqTCC
-dAFtCUL0T/m5LRbT0P3QfUKBKah7e/nMKBgRe+TVXrjnWICDWQiJ1W7D0UGGo2Jw
-FJ5IfquS01J5mRUBykwlUqH7LJC4plske1Ls/C7VnfaXHDIBETlztT8attt9GNCC
-GXfYo0FsTpnBYC/vgmHxVjdFnXJmdWEc8xVGa2LRxwyRFtKAWczhBb5Gfhp/cMro
-tyQqWJeWDNWAy4ASzZLoLpsQ7ZHSETOhnUpqPqSeWbSOTpwMD2aBzrA5AUfs+o/B
-mbkLcHPJHKCEGT/Alz4/Aw+V7mwZzKt/V2DQxwNDXPPxhFzJWfwzqw0oaip6ato9
-qQ7ArBOTTArhmGUMBuNQVhdED/IHpvLt6MXkr1DpxKyhkl17MjwJKWtjFxfIl8j5
-dezlHlPRs84xA6QNXOUzujHmZhUMST9U91VbpsF/nJJsp4oQ2qQCdm8ByOxFHlAU
-7HbUrBfriemWHoRX5yZqJMpkMe2AjENx3mS8T7R4zwXZrG34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 -----END CERTIFICATE-----
diff --git a/tools/postgres/certs/rootCA.key b/tools/postgres/certs/rootCA.key
index 46c48fd13206..933ea2a68374 100644
--- a/tools/postgres/certs/rootCA.key
+++ b/tools/postgres/certs/rootCA.key
@@ -1,51 +1,51 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIJKQIBAAKCAgEA3NkGpwrcZraAyWhsb+a+BydI9DKgg1gt4qypnY7LzszDA45P
-IYq2iNErVs0vLP5o3nijK12S9EBcGHfoTfuI7S3FK1mFh11MQ1P0sfbUvtUaYfS2
-TRUx6qgv7cJz7/HQLotPyRBD3kQ5piDe5L8WG8ck8qEyQfFNm9TnGvYb1LdXT41/
-78OoTSvpzBk5M+2Odi9igvEZ3W1bI2dwVHebpu+6UhK5f16IOZBn+lF1SF2+HA5t
-oWwebZqxmyyXxlziytbJ24FWTxD1n6Rgo+m87PG35OInvS5SsszjNeKp+MT/SdkF
-xKVrHGkJyuvVms2ybfJ9gPH3H4fmo+OAybpfP3JLOlPETGjGHyadJAagUY6C/qUT
-mSd0a/YmVtjRzPwcLb7xlxHye+smB/ryY3qpqpbapMX4JIoCx/rrTwy797ViD8+s
-oYxXALm70vgPH6j+nkfAK42gq4DCWvqCL7G47/PHcjMqlB2OGBJLD9nmZ9+xVI/8
-6sQrR3v/GYytj/HdZyX3bgHG/3wH7qwFSnKnIqivXmAP1yRZsH8O/QzSPGc2CNHV
-enJ+KBu4aUSHsmrj9XY1bhEiyeBt16c+3HTc1fTiBThvfx7f3VqKGQJsxiOXKhe+
-HZXIx26hSEHPNoynK8NH317ClGJqJwd5uGpBXaJ+b5TqEMFsNvxsqej5aFkCAwEA
-AQKCAgEAqn4Y9qgZ0mmeLt6gqBq4JQmc9niHFh7i/ZVSNEJi8Ll+66XXTQurMyBX
-luE8RD37c5QqU3Yf1tRAxNr8ygcfhArLplWsEf5iu696vlDRmKknfuvOON/d80v4
-BFMT8e76SpRd+djGrDZ7UtcZe/pQ9QzeZzkudV32DhFkgJnyjlsj2lRgqhagPUNj
-cJ8gXAhO7MpUAMZks16S91gJjgvwbAWyD15JOh0eiWIEA2kTY9SKyVoSJIY1T2QX
-LLZWTVqz8ueyWfUVTmDHXoEl4iS2Jy3MS7ST/SZfzY0C8zyS/2wFsVsLau5RLFOi
-rbc25hVaZCrJ3NvvbbYaxfcCG7n3gLJ49ulDyrh4WnYmvYRZP6UqCorszvQk2FrG
-pAMipeznOUXEvF6SsxkE+CheuMBBod4CwMGraOAEtAp0Mbur75HkOgsz2uAm1Xx6
-hqhoL2lqdr5nhQHwbphejO8bln/qdT87t8XMfeeTINwUX4YopLsjpU+3Cl7K3fBh
-nS7nTib7hESFjPFkO0y2c8nEneu5SrSG9FN/q5XQQnKz3coWoDOtK/Zk+CFOlwGK
-I6HB3zfOvxZ3hwASpe7SxyDV+wzXkMfBnYWS8P63QAx75pd+kjXV/4wyYELsrJX7
-b7SVpx1gVLPF3+RXjO2GQmlPPncqUMhQ6cQ3VILBC+5r9TMQvaECggEBAO5GyVVV
-JyRMJWmrPs2+vBMqumZrUzRMcQxKqtIxiCHyvuUMNTiGaCt+xZappzkV4MJe/p4q
-UKgM+mwQW8M8qoORk6pPcSUH0fwPMt9J16Mv0fjoSKbRG9d8hNToT6GERFGvGoG7
-/6XNcgHUjY872A2BLlB2NwU4yRauz+0YbsU7PlkVXfGmQqmTOAJ2+5nrhekNs70O
-mPQcnBPHSj0F6FDzyjET0jGEhEDICmW8s3gck/dVdJSesND8lfq3YxRa2T5QUVQV
-LdgFgv3UKhnKmTmd07IfkQCn4z0j6scRQEemzk388vFdZC7V4+oZEX5O2QYE+P/c
-IQvpl1l5cvNKWY0CggEBAO1GXV7XewVqKepv9Yo1wAiMMVDdt2XYOUDVIW/JlSen
-Pb622c1x8Cs/GcOg0oZcBx4AAwhcbDVcAJYRydjoA8QwGNAn8DvoNJ+9bbc9+IDl
-MTz9naebAagNeQ6JFBJD7Ni6FPSi1HHWXRByUkVIHLMWjeC+GOycjYnrS18YyuwK
-YwJTltAs0S2lf5l5OE7inzLOcTb/GieOffal5qfSrA6ABICM9f4XBCTt0IF7IsOM
-zZQshfNvbutPq1OM7eRVwWopr2cmCSzS2bDGorMibMSHnVNSur4MUgKDeqUBZtYz
-6jGB6oYR8lqlRhoucu8uhLgnUhB61OQk+MEEN8OciP0CggEBAM5Y6PSIOMx7UQ8Q
-qOPeoNtsbl5R5Y1uAZymcQZ0tLLJmL2c894Or9mzAIQ4ScPrCWjqgVARzyWpj5jU
-FdOfDv+/q4SbJZ3vBs9ljiXGugLtX8ZRytEEWDsl75a91HBIri2bGbZuS7eXknq5
-SxpWtgUD8UrnBUD1a1fEbfai6RLO+nCFS4UA+cwG3UNtLPif+ajZH+XC5XzJ5fRO
-6yCrpAOvDFOyGZ6eZzX+xtpSL43+Gbng/IPUZcWmaG/mLtyqzGXlgnjxmnDwXP9a
-pFcPl+BIqNMh+R37RpRlLWXVr7gdYZ4yR2X0/dR9kNHjgb3DpLhMyCIzzT6WvWZU
-AdNleOUCggEAIdkI1s+8b/BOHHBuQZIbW9zL6DJIyFGJEVOWGoFSMr7r0vn4phMb
-5L9yqHKXta0JIuFzjUzJ7u658q6E8dlfOCx4TbF01sbwQt1d+mbvvUt0s7OmOtOk
-79lELKunXlesQNqCxMc5sSeYTRFR5So9Vdrg0G+t1IscsdEMBnvd7sAokZtlBztt
-d6qFQlqFitNPTIsgoWzQyVXNaFMQTV6DRupCOihhqyaTY8U9Gkt7kRPT+9BCJ5D8
-7LqHwTp4cTs+hSt/JyLI6kkF3u7nJNDDXWHPMqS5mQTe6hbhdwp1Jhdv0DItR4Tl
-4sJy9qcrpC0pp6+MSGeNWSJhDf/RCKma7QKCAQAM+cgDx89WNFMTLAMORPaMDHi2
-SU2HQS962/5xOc/tb/oGPhzuMcMpT6G7/kWYBhubWUURlqhLHEX7xbhtLDI1tilD
-U/82GQ3jOB5FeXtFhvDkIS9cHhH5SHPz7+m/RbkHtKmnP8jTcl6Z49j9EPfvBfJc
-Ywi99Q5xMBwHy6CYRPq40JwVr1+sKtgpVit1BnbQql2z3oSAvQvNTdXhVWD4xQtv
-a6y4xLCkiTaVY0a8voT04M9vVPRfX5Lm87DT4a2Cdisr4hGfg1NsMvoqwG6ndSWg
-fqxcwSV1i+tSSq2xmmRlajBLmNU6kTDUNCZIevXDhqAXkQ1hWHCwa2UHFgFV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 -----END RSA PRIVATE KEY-----
diff --git a/tools/postgres/certs/rootCA.srl b/tools/postgres/certs/rootCA.srl
index b48244c52fed..eccd6a00faf8 100644
--- a/tools/postgres/certs/rootCA.srl
+++ b/tools/postgres/certs/rootCA.srl
@@ -1 +1 @@
-E2E4C80C2B8E5675
+E2E4C80C2B8E5681

From 013aced1a93e2924672ebaca869daa4578268bf2 Mon Sep 17 00:00:00 2001
From: Mike Beaumont <mjboamail@gmail.com>
Date: Wed, 14 Sep 2022 22:17:41 +0200
Subject: [PATCH 4/4] docs(UPGRADE.md): add note

Signed-off-by: Mike Beaumont <mjboamail@gmail.com>
---
 UPGRADE.md | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/UPGRADE.md b/UPGRADE.md
index 872ab5ddbc6e..5535b9f11c1f 100644
--- a/UPGRADE.md
+++ b/UPGRADE.md
@@ -8,6 +8,11 @@ does not have any particular instructions.
 
 ## Upcoming release
 
+### Universal
+
+A `lib/pq` change enables SNI by default when connecting to Postgres over TLS.
+Make sure your certificates contain a valid CN or SANs.
+
 ### `kuma-prometheus-sd`
 
 This component has been removed