From f15df99c1eda8ce4057218819904aa3789f97b28 Mon Sep 17 00:00:00 2001
From: Luke Lombardi <33990301+luke-lombardi@users.noreply.github.com>
Date: Tue, 28 Jul 2026 17:08:08 -0400
Subject: [PATCH] test: cover PostgreSQL TLS DSN

---
 pkg/repository/backend_postgres_test.go | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/pkg/repository/backend_postgres_test.go b/pkg/repository/backend_postgres_test.go
index 07a630fa2..61d8468a4 100644
--- a/pkg/repository/backend_postgres_test.go
+++ b/pkg/repository/backend_postgres_test.go
@@ -18,6 +18,18 @@ import (
 
 const adminWorkspaceQueryPattern = `SELECT w\.id, w\.external_id.*WHERE w\.is_cluster_admin`
 
+func TestGenerateDSNSSLMode(t *testing.T) {
+	t.Run("disabled", func(t *testing.T) {
+		dsn := GenerateDSN(types.PostgresConfig{EnableTLS: false})
+		require.Contains(t, dsn, "sslmode=disable")
+	})
+
+	t.Run("required", func(t *testing.T) {
+		dsn := GenerateDSN(types.PostgresConfig{EnableTLS: true})
+		require.Contains(t, dsn, "sslmode=require")
+	})
+}
+
 func TestListTaskWithRelated(t *testing.T) {
 	// Remove this skip if you are testing on local data
 	t.Skip()