Environment Configuration Settings

Global/Universal

• PATRONI_CONFIGURATION : it is possible to set the entire configuration for the Patroni via PATRONI_CONFIGURATION environment variable. In this case any other environment variables will not be considered!

• PATRONI_NAME : name of the node where the current instance of Patroni is running. Must be unique for the cluster.

• PATRONI_NAMESPACE : path within the configuration store where Patroni will keep information about the cluster. Default value: "/service"

• PATRONI_SCOPE : cluster name

Log

• PATRONI_LOG_LEVEL : sets the general logging level. Default value is INFO (see the docs for Python logging )

• PATRONI_LOG_TRACEBACK_LEVEL : sets the level where tracebacks will be visible. Default value is ERROR . Set it to DEBUG if you want to see tracebacks only if you enable PATRONI_LOG_LEVEL=DEBUG .

• PATRONI_LOG_FORMAT : sets the log formatting string. Default value is %(asctime)s %(levelname)s: %(message)s (see the LogRecord attributes )

• PATRONI_LOG_DATEFORMAT : sets the datetime formatting string. (see the formatTime() documentation )

• PATRONI_LOG_MAX_QUEUE_SIZE : Patroni is using two-step logging. Log records are written into the in-memory queue and there is a separate thread which pulls them from the queue and writes to stderr or file. The maximum size of the internal queue is limited by default by 1000 records, which is enough to keep logs for the past 1h20m.

• PATRONI_LOG_DIR : Directory to write application logs to. The directory must exist and be writable by the user executing Patroni. If you set this env variable, the application will retain 4 25MB logs by default. You can tune those retention values with PATRONI_LOG_FILE_NUM and PATRONI_LOG_FILE_SIZE (see below).

• PATRONI_LOG_FILE_NUM : The number of application logs to retain.

• PATRONI_LOG_FILE_SIZE : Size of patroni.log file (in bytes) that triggers a log rolling.

• PATRONI_LOG_LOGGERS : Redefine logging level per python module. Example PATRONI_LOG_LOGGERS="{patroni.postmaster: WARNING, urllib3: DEBUG}"

Bootstrap configuration

It is possible to create new database users right after the successful initialization of a new cluster. This process is defined by the following variables:

• PATRONI__PASSWORD=’’

• PATRONI__OPTIONS=’list,of,options’

Example: defining PATRONI_admin_PASSWORD=strongpasswd and PATRONI_admin_OPTIONS='createrole,createdb' will cause creation of the user admin with the password strongpasswd that is allowed to create other users and databases.

Consul

• PATRONI_CONSUL_HOST : the host:port for the Consul local agent.

• PATRONI_CONSUL_URL : url for the Consul local agent, in format: http(s)://host:port

• PATRONI_CONSUL_PORT : (optional) Consul port

• PATRONI_CONSUL_SCHEME : (optional) http or https , defaults to http

• PATRONI_CONSUL_TOKEN : (optional) ACL token

• PATRONI_CONSUL_VERIFY : (optional) whether to verify the SSL certificate for HTTPS requests

• PATRONI_CONSUL_CACERT : (optional) The ca certificate. If present it will enable validation.

• PATRONI_CONSUL_CERT : (optional) File with the client certificate

• PATRONI_CONSUL_KEY : (optional) File with the client key. Can be empty if the key is part of certificate.

• PATRONI_CONSUL_DC : (optional) Datacenter to communicate with. By default the datacenter of the host is used.

• PATRONI_CONSUL_CONSISTENCY : (optional) Select consul consistency mode. Possible values are default , consistent , or stale (more details in consul API reference )

• PATRONI_CONSUL_CHECKS : (optional) list of Consul health checks used for the session. By default an empty list is used.

• PATRONI_CONSUL_REGISTER_SERVICE : (optional) whether or not to register a service with the name defined by the scope parameter and the tag master, replica or standby-leader depending on the node’s role. Defaults to false

• PATRONI_CONSUL_SERVICE_CHECK_INTERVAL : (optional) how often to perform health check against registered url

Etcd

• PATRONI_ETCD_PROXY : proxy url for the etcd. If you are connecting to the etcd using proxy, use this parameter instead of PATRONI_ETCD_URL

• PATRONI_ETCD_URL : url for the etcd, in format: http(s)://(username:password@)host:port

• PATRONI_ETCD_HOSTS : list of etcd endpoints in format ‘host1:port1’,’host2:port2’,etc…

• PATRONI_ETCD_USE_PROXIES : If this parameter is set to true, Patroni will consider hosts as a list of proxies and will not perform a topology discovery of etcd cluster but stick to a fixed list of hosts .

• PATRONI_ETCD_PROTOCOL : http or https, if not specified http is used. If the url or proxy is specified - will take protocol from them.

• PATRONI_ETCD_HOST : the host:port for the etcd endpoint.

• PATRONI_ETCD_SRV : Domain to search the SRV record(s) for cluster autodiscovery.

• PATRONI_ETCD_USERNAME : username for etcd authentication.

• PATRONI_ETCD_PASSWORD : password for etcd authentication.

• PATRONI_ETCD_CACERT : The ca certificate. If present it will enable validation.

• PATRONI_ETCD_CERT : File with the client certificate.

• PATRONI_ETCD_KEY : File with the client key. Can be empty if the key is part of certificate.

Etcdv3

Environment names for Etcdv3 are similar as for Etcd, you just need to use ETCD3 instead of ETCD in the variable name. Example: PATRONI_ETCD3_HOST , PATRONI_ETCD3_CACERT , and so on.

ZooKeeper

• PATRONI_ZOOKEEPER_HOSTS : Comma separated list of ZooKeeper cluster members: "‘host1:port1’,’host2:port2’,’etc…’". It is important to quote every single entity!

• PATRONI_ZOOKEEPER_USE_SSL : (optional) Whether SSL is used or not. Defaults to false . If set to false , all SSL specific parameters are ignored.

• PATRONI_ZOOKEEPER_CACERT : (optional) The CA certificate. If present it will enable validation.

• PATRONI_ZOOKEEPER_CERT : (optional) File with the client certificate.

• PATRONI_ZOOKEEPER_KEY : (optional) File with the client key.

• PATRONI_ZOOKEEPER_KEY_PASSWORD : (optional) The client key password.

• PATRONI_ZOOKEEPER_VERIFY : (optional) Whether to verify certificate or not. Defaults to true .

Exhibitor

• PATRONI_EXHIBITOR_HOSTS : initial list of Exhibitor (ZooKeeper) nodes in format: ‘host1,host2,etc…’. This list updates automatically whenever the Exhibitor (ZooKeeper) cluster topology changes.

• PATRONI_EXHIBITOR_PORT : Exhibitor port.

Kubernetes

• PATRONI_KUBERNETES_BYPASS_API_SERVICE : (optional) When communicating with the Kubernetes API, Patroni is usually relying on the kubernetes service, the address of which is exposed in the pods via the KUBERNETES_SERVICE_HOST environment variable. If PATRONI_KUBERNETES_BYPASS_API_SERVICE is set to true , Patroni will resolve the list of API nodes behind the service and connect directly to them.

• PATRONI_KUBERNETES_NAMESPACE : (optional) Kubernetes namespace where the Patroni pod is running. Default value is default .

• PATRONI_KUBERNETES_LABELS : Labels in format {label1: value1, label2: value2} . These labels will be used to find existing objects (Pods and either Endpoints or ConfigMaps) associated with the current cluster. Also Patroni will set them on every object (Endpoint or ConfigMap) it creates.

• PATRONI_KUBERNETES_SCOPE_LABEL : (optional) name of the label containing cluster name. Default value is cluster-name .

• PATRONI_KUBERNETES_ROLE_LABEL : (optional) name of the label containing Postgres role ( master or replica ). Patroni will set this label on the pod it is running in. Default value is role .

• PATRONI_KUBERNETES_USE_ENDPOINTS : (optional) if set to true, Patroni will use Endpoints instead of ConfigMaps to run leader elections and keep cluster state.

• PATRONI_KUBERNETES_POD_IP : (optional) IP address of the pod Patroni is running in. This value is required when PATRONI_KUBERNETES_USE_ENDPOINTS is enabled and is used to populate the leader endpoint subsets when the pod’s PostgreSQL is promoted.

• PATRONI_KUBERNETES_PORTS : (optional) if the Service object has the name for the port, the same name must appear in the Endpoint object, otherwise service won’t work. For example, if your service is defined as {Kind: Service, spec: {ports: [{name: postgresql, port: 5432, targetPort: 5432}]}} , then you have to set PATRONI_KUBERNETES_PORTS='[{"name": "postgresql", "port": 5432}]' and Patroni will use it for updating subsets of the leader Endpoint. This parameter is used only if PATRONI_KUBERNETES_USE_ENDPOINTS is set.

Raft

• PATRONI_RAFT_SELF_ADDR : ip:port to listen on for Raft connections. The self_addr must be accessible from other nodes of the cluster. If not set, the node will not participate in consensus.

• PATRONI_RAFT_BIND_ADDR : (optional) ip:port to listen on for Raft connections. If not specified the self_addr will be used.

• PATRONI_RAFT_PARTNER_ADDRS : list of other Patroni nodes in the cluster in format "'ip1:port1','ip2:port2'" . It is important to quote every single entity!

• PATRONI_RAFT_DATA_DIR : directory where to store Raft log and snapshot. If not specified the current working directory is used.

• PATRONI_RAFT_PASSWORD : (optional) Encrypt Raft traffic with a specified password, requires cryptography python module.

PostgreSQL

• PATRONI_POSTGRESQL_LISTEN : IP address + port that Postgres listens to. Multiple comma-separated addresses are permitted, as long as the port component is appended after to the last one with a colon, i.e. listen: 127.0.0.1,127.0.0.2:5432 . Patroni will use the first address from this list to establish local connections to the PostgreSQL node.

• PATRONI_POSTGRESQL_CONNECT_ADDRESS : IP address + port through which Postgres is accessible from other nodes and applications.

• PATRONI_POSTGRESQL_DATA_DIR : The location of the Postgres data directory, either existing or to be initialized by Patroni.

• PATRONI_POSTGRESQL_CONFIG_DIR : The location of the Postgres configuration directory, defaults to the data directory. Must be writable by Patroni.

• PATRONI_POSTGRESQL_BIN_DIR : Path to PostgreSQL binaries. (pg_ctl, pg_rewind, pg_basebackup, postgres) The default value is an empty string meaning that PATH environment variable will be used to find the executables.

• PATRONI_POSTGRESQL_PGPASS : path to the .pgpass password file. Patroni creates this file before executing pg_basebackup and under some other circumstances. The location must be writable by Patroni.

• PATRONI_REPLICATION_USERNAME : replication username; the user will be created during initialization. Replicas will use this user to access master via streaming replication

• PATRONI_REPLICATION_PASSWORD : replication password; the user will be created during initialization.

• PATRONI_REPLICATION_SSLMODE : (optional) maps to the sslmode connection parameter, which allows a client to specify the type of TLS negotiation mode with the server. For more information on how each mode works, please visit the PostgreSQL documentation . The default mode is prefer .

• PATRONI_REPLICATION_SSLKEY : (optional) maps to the sslkey connection parameter, which specifies the location of the secret key used with the client’s certificate.

• PATRONI_REPLICATION_SSLPASSWORD : (optional) maps to the sslpassword connection parameter, which specifies the password for the secret key specified in PATRONI_REPLICATION_SSLKEY .

• PATRONI_REPLICATION_SSLCERT : (optional) maps to the sslcert connection parameter, which specifies the location of the client certificate.

• PATRONI_REPLICATION_SSLROOTCERT : (optional) maps to the sslrootcert connection parameter, which specifies the location of a file containing one ore more certificate authorities (CA) certificates that the client will use to verify a server’s certificate.

• PATRONI_REPLICATION_SSLCRL : (optional) maps to the sslcrl connection parameter, which specifies the location of a file containing a certificate revocation list. A client will reject connecting to any server that has a certificate present in this list.

• PATRONI_REPLICATION_GSSENCMODE : (optional) maps to the gssencmode connection parameter, which determines whether or with what priority a secure GSS TCP/IP connection will be negotiated with the server

• PATRONI_REPLICATION_CHANNEL_BINDING : (optional) maps to the channel_binding connection parameter, which controls the client’s use of channel binding.

• PATRONI_SUPERUSER_USERNAME : name for the superuser, set during initialization (initdb) and later used by Patroni to connect to the postgres. Also this user is used by pg_rewind.

• PATRONI_SUPERUSER_PASSWORD : password for the superuser, set during initialization (initdb).

• PATRONI_SUPERUSER_SSLMODE : (optional) maps to the sslmode connection parameter, which allows a client to specify the type of TLS negotiation mode with the server. For more information on how each mode works, please visit the PostgreSQL documentation . The default mode is prefer .

• PATRONI_SUPERUSER_SSLKEY : (optional) maps to the sslkey connection parameter, which specifies the location of the secret key used with the client’s certificate.

• PATRONI_SUPERUSER_SSLPASSWORD : (optional) maps to the sslpassword connection parameter, which specifies the password for the secret key specified in PATRONI_SUPERUSER_SSLKEY .

• PATRONI_SUPERUSER_SSLCERT : (optional) maps to the sslcert connection parameter, which specifies the location of the client certificate.

• PATRONI_SUPERUSER_SSLROOTCERT : (optional) maps to the sslrootcert connection parameter, which specifies the location of a file containing one ore more certificate authorities (CA) certificates that the client will use to verify a server’s certificate.

• PATRONI_SUPERUSER_SSLCRL : (optional) maps to the sslcrl connection parameter, which specifies the location of a file containing a certificate revocation list. A client will reject connecting to any server that has a certificate present in this list.

• PATRONI_SUPERUSER_GSSENCMODE : (optional) maps to the gssencmode connection parameter, which determines whether or with what priority a secure GSS TCP/IP connection will be negotiated with the server

• PATRONI_SUPERUSER_CHANNEL_BINDING : (optional) maps to the channel_binding connection parameter, which controls the client’s use of channel binding.

• PATRONI_REWIND_USERNAME : name for the user for pg_rewind ; the user will be created during initialization of postgres 11+ and all necessary permissions will be granted.

• PATRONI_REWIND_PASSWORD : password for the user for pg_rewind ; the user will be created during initialization.

• PATRONI_REWIND_SSLMODE : (optional) maps to the sslmode connection parameter, which allows a client to specify the type of TLS negotiation mode with the server. For more information on how each mode works, please visit the PostgreSQL documentation . The default mode is prefer .

• PATRONI_REWIND_SSLKEY : (optional) maps to the sslkey connection parameter, which specifies the location of the secret key used with the client’s certificate.

• PATRONI_REWIND_SSLPASSWORD : (optional) maps to the sslpassword connection parameter, which specifies the password for the secret key specified in PATRONI_REWIND_SSLKEY .

• PATRONI_REWIND_SSLCERT : (optional) maps to the sslcert connection parameter, which specifies the location of the client certificate.

• PATRONI_REWIND_SSLROOTCERT : (optional) maps to the sslrootcert connection parameter, which specifies the location of a file containing one ore more certificate authorities (CA) certificates that the client will use to verify a server’s certificate.

• PATRONI_REWIND_SSLCRL : (optional) maps to the sslcrl connection parameter, which specifies the location of a file containing a certificate revocation list. A client will reject connecting to any server that has a certificate present in this list.

• PATRONI_REWIND_GSSENCMODE : (optional) maps to the gssencmode connection parameter, which determines whether or with what priority a secure GSS TCP/IP connection will be negotiated with the server

• PATRONI_REWIND_CHANNEL_BINDING : (optional) maps to the channel_binding connection parameter, which controls the client’s use of channel binding.

REST API

• PATRONI_RESTAPI_CONNECT_ADDRESS : IP address and port to access the REST API.

• PATRONI_RESTAPI_LISTEN : IP address and port that Patroni will listen to, to provide health-check information for HAProxy.

• PATRONI_RESTAPI_USERNAME : Basic-auth username to protect unsafe REST API endpoints.

• PATRONI_RESTAPI_PASSWORD : Basic-auth password to protect unsafe REST API endpoints.

• PATRONI_RESTAPI_CERTFILE : Specifies the file with the certificate in the PEM format. If the certfile is not specified or is left empty, the API server will work without SSL.

• PATRONI_RESTAPI_KEYFILE : Specifies the file with the secret key in the PEM format.

• PATRONI_RESTAPI_CAFILE : Specifies the file with the CA_BUNDLE with certificates of trusted CAs to use while verifying client certs.

• PATRONI_RESTAPI_VERIFY_CLIENT : none (default), optional or required . When none REST API will not check client certificates. When required client certificates are required for all REST API calls. When optional client certificates are required for all unsafe REST API endpoints. When required is used, then client authentication succeeds, if the certificate signature verification succeeds. For optional the client cert will only be checked for PUT , POST , PATCH , and DELETE requests.

• PATRONI_RESTAPI_HTTP_EXTRA_HEADERS : (optional) HTTP headers let the REST API server pass additional information with an HTTP response.

• PATRONI_RESTAPI_HTTPS_EXTRA_HEADERS : (optional) HTTPS headers let the REST API server pass additional information with an HTTP response when TLS is enabled. This will also pass additional information set in http_extra_headers .

CTL

• PATRONICTL_CONFIG_FILE : location of the configuration file.

• PATRONI_CTL_INSECURE : Allow connections to REST API without verifying SSL certs.

• PATRONI_CTL_CACERT : Specifies the file with the CA_BUNDLE file or directory with certificates of trusted CAs to use while verifying REST API SSL certs. If not provided patronictl will use the value provided for REST API "cafile" parameter.

• PATRONI_CTL_CERTFILE : Specifies the file with the client certificate in the PEM format. If not provided patronictl will use the value provided for REST API "certfile" parameter.

• PATRONI_CTL_KEYFILE : Specifies the file with the client secret key in the PEM format. If not provided patronictl will use the value provided for REST API "keyfile" parameter.