PgBouncer-FIPS is a lightweight connection pooler for PostgreSQL that provides FIPS 140-2 validated cryptographic operations. It helps manage database connections efficiently while maintaining security compliance requirements for regulated environments. This container is specifically hardened and configured for enterprise use in environments requiring FIPS compliance.
Core capabilities and strengths of this container
Typical scenarios where this container excels
Download the container image from the registry
docker pull clnstrt-images.cleanstart.com/$ORGANIZATION/pgbouncer-fips:latestdocker pull clnstrt-images.cleanstart.com/$ORGANIZATION/pgbouncer-fips:latest-devRun the container with basic configuration
docker run -d --name pgbouncer \
-p 6432:6432 \
-e DB_HOST=postgres.example.com \
-e DB_PORT=5432 \
-e DB_USER=dbuser \
-e DB_PASSWORD=secretpassword \
clnstrt-images.cleanstart.com/$ORGANIZATION/pgbouncer-fips:latestDeploy with production security settings
docker run -d --name pgbouncer-prod \
--read-only \
--security-opt=no-new-privileges \
--user 1000:1000 \
-p 6432:6432 \
-v pgbouncer-config:/etc/pgbouncer \
-e DB_HOST=postgres.example.com \
-e DB_PORT=5432 \
-e MAX_CLIENT_CONN=100 \
clnstrt-images.cleanstart.com/$ORGANIZATION/pgbouncer-fips:latestMount local configuration directory
docker run -d \
-v $(pwd)/pgbouncer.ini:/etc/pgbouncer/pgbouncer.ini \
clnstrt-images.cleanstart.com/$ORGANIZATION/pgbouncer-fips:latestRun with custom port mappings
docker run -d -p 5432:6432 clnstrt-images.cleanstart.com/$ORGANIZATION/pgbouncer-fips:latestConfiguration options available through environment variables
localhost5432postgres100sessionRecommended security configurations and practices
Recommended security context for Kubernetes deployments
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
seccompProfile:
type: RuntimeDefaultEssential links and resources for further information