TDR-3505 Update RDS instance certificate (#386)

* Update RDS instance certificate * apply_immediately
nationalarchives · Oct 31, 2023 · f565249 · f565249
1 parent bfae8fe
commit f565249
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 1 deletion.
diff --git a/root.tf b/root.tf
@@ -790,6 +790,8 @@ module "consignment_api_database" {
   private_subnets    = module.shared_vpc.private_subnets
   security_group_ids = [module.api_database_security_group.security_group_id]
   multi_az           = local.environment == "prod"
+  ca_cert_identifier = local.database_ca_cert_identifier
+  apply_immediately  = true
 }
 
 module "waf_cloudwatch" {

diff --git a/root_keycloak.tf b/root_keycloak.tf
@@ -162,7 +162,9 @@ module "keycloak_database_instance" {
   private_subnets         = module.shared_vpc.private_subnets
   security_group_ids      = [module.keycloak_database_security_group.security_group_id]
   multi_az                = local.environment == "prod"
+  ca_cert_identifier      = local.database_ca_cert_identifier
   backup_retention_period = 30
+  apply_immediately       = true
 }
 
 module "create_keycloak_db_users_lambda_new" {

diff --git a/root_locals.tf b/root_locals.tf
@@ -24,6 +24,8 @@ locals {
 
   database_availability_zone = "eu-west-2a"
 
+  database_ca_cert_identifier = "rds-ca-rsa2048-g1"
+
   region = "eu-west-2"
 
   dns_zone_id = data.aws_route53_zone.tdr_dns_zone.zone_id

diff --git a/tdr-terraform-modules b/tdr-terraform-modules