Using pgAdmin Windows client to access postgresql database through Teleport

[deusxanima]

This article assumes that you are already familiar with the process of adding a database connection in pgAdmin and have gone through the Teleport Database Access GUI Clients documentation to familiarize yourself with the full set of configuration requirements.

There are two ways to get pgAdmin to work with Teleport on Windows.

Manually load the certificates and declare the proxy endpoint for the db:

1. Log into teleport via tsh login on the Windows client
2. Log into the db via tsh db login db_name
3. Run tsh db config to get host, port, and cert paths.
4. Open pgAdmin and navigate to the Properties tab of the db connection you wish to modify by right-clicking the connection and then selecting Properties, or if you need to create a new connection, right-click on Servers and click 'Create > Server'
5. Copy the host/port from the .pg_service.conf file created earlier to the Host name/Address and Port form in the Connection tab, and add the db user to the Username form
6. Copy the SSL Root/Cert/Key path from the .pg_service.conf file to the appropriate paths in the SSL tab

Have pgAdmin automatically load certificates and declare proxy endpoint for the db via service file on login:

1. Log into teleport via tsh login on the Windows client
2. Log into the db via tsh db login db_name
3. Run tsh db config to get host, port, and cert paths.
4. Open up a cli terminal and set the PG Service File env variable with setx PGSERVICEFILE <path_to_.pg_service.conf_file> (the .pg_service.conf file should be in your home directory once you log into the db with tsh db login db_name)
5. Open pgAdmin and navigate to the Properties tab of the db connection you wish to modify by right-clicking the connection and then selecting Properties, or if you need to create a new connection, right-click on Servers and then select 'Create > Server>'
6. Copy the pg_service profile name from the .pg_service.conf file created earlier to the Service form in the Connection tab

Note also that you may have to restart pgAdmin after setting the PGSERVICEFILE variable and configuring the Service name in the db Properties section in order for the change to be promulgated.