# requires the external-postgres.yml op file
- type: replace
  path: /instance_groups/name=web/jobs/name=atc/properties/postgresql/ca_cert?
  value: ((postgres_ca_cert))
- type: replace
  path: /instance_groups/name=web/jobs/name=atc/properties/postgresql/sslmode?
  value: verify-ca

Enable TSL for external PostgreSQL
Enable TSL for external PostgreSQL