diff --git a/Cargo.lock b/Cargo.lock
index fa825f40ccfad..dd45dcdd0ca3d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -10774,6 +10774,7 @@ dependencies = [
  "memchr",
  "once_cell",
  "percent-encoding",
+ "rustls 0.23.23",
  "serde",
  "serde_json",
  "sha2",
@@ -10783,6 +10784,7 @@ dependencies = [
  "tokio-stream",
  "tracing 0.1.41",
  "url",
+ "webpki-roots 0.26.1",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index 54d61e5a10242..b9a2dd92aa1c1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -416,7 +416,7 @@ seahash = { version = "4.1.0", default-features = false }
 smallvec = { version = "1", default-features = false, features = ["union", "serde"] }
 snap = { version = "1.1.1", default-features = false }
 socket2.workspace = true
-sqlx = { version = "0.8.6", default-features = false, features = ["derive", "postgres", "chrono", "runtime-tokio"], optional = true }
+sqlx = { version = "0.8.6", default-features = false, features = ["derive", "postgres", "chrono", "runtime-tokio", "tls-rustls-ring"], optional = true }
 stream-cancel = { version = "0.8.2", default-features = false }
 strip-ansi-escapes = { version = "0.2.1", default-features = false }
 syslog = { version = "6.1.1", default-features = false, optional = true }
diff --git a/changelog.d/23536_postgres_sink_enable_tls.fix.md b/changelog.d/23536_postgres_sink_enable_tls.fix.md
new file mode 100644
index 0000000000000..c87a6e2177cd6
--- /dev/null
+++ b/changelog.d/23536_postgres_sink_enable_tls.fix.md
@@ -0,0 +1,3 @@
+Fixed an issue in the `postgres` sink which made a TLS connection impossible due to a missing `sqlx` feature flag.
+
+authors: thomasqueirozb