Răsfoiți Sursa

Merge pull request #362 from mdr-engineering/feature/jc_MSOCI-1997_RDS_Certificate_Renewal

RDS certificate renewal to rds-ca-rsa4096-g1 version
Jeremy Cooper 3 ani în urmă
părinte
comite
724e0e6a11
3 a modificat fișierele cu 3 adăugiri și 3 ștergeri
  1. 1 1
      base/customer_portal/rds.tf
  2. 1 1
      base/jira/rds_jira/main.tf
  3. 1 1
      base/rhsso/rds.tf

+ 1 - 1
base/customer_portal/rds.tf

@@ -20,7 +20,7 @@ resource "aws_db_instance" "postgres" {
   db_subnet_group_name        = aws_db_subnet_group.customer_portal_rds_subnets.name
   backup_window               = "03:00-06:00"
   backup_retention_period     = 7
-  ca_cert_identifier          = "rds-ca-2017"
+  ca_cert_identifier          = "rds-ca-rsa4096-g1"
   deletion_protection         = var.environment == "test" ? "false" : "true"
   delete_automated_backups    = "true"
   engine                      = "postgres"

+ 1 - 1
base/jira/rds_jira/main.tf

@@ -4,7 +4,7 @@ data "aws_rds_certificate" "latest" {
 
 locals {
   # GovCloud and Commercial use different CA certs
-  ca_cert_identifier = var.aws_partition == "aws" ? "rds-ca-2019" : "rds-ca-2017"
+  ca_cert_identifier = var.aws_partition == "aws" ? "rds-ca-2019" : "rds-ca-rsa4096-g1"
 }
 
 output "ca_cert_identifier" {

+ 1 - 1
base/rhsso/rds.tf

@@ -4,7 +4,7 @@ data "aws_rds_certificate" "latest" {
 
 locals {
   # GovCloud and Commercial use different CA certs
-  ca_cert_identifier = var.aws_partition == "aws" ? "rds-ca-2019" : "rds-ca-2017"
+  ca_cert_identifier = var.aws_partition == "aws" ? "rds-ca-2019" : "rds-ca-rsa4096-g1"
 }
 
 output "ca_cert_identifier" {