From 5d9767b33ee34afb367ce32db8157ff4f004e370 Mon Sep 17 00:00:00 2001 From: Sam Crang Date: Mon, 3 Feb 2020 14:37:19 +0000 Subject: [PATCH] Bump the RDS Postgres engine version and RDS root CA It doesn't appear that the `self-service` Rails app is verifying the certificate RDS presents so we should be good to just start presenting the new one. --- terraform/modules/self-service/db.tf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/terraform/modules/self-service/db.tf b/terraform/modules/self-service/db.tf index be31df90..623fb2e5 100644 --- a/terraform/modules/self-service/db.tf +++ b/terraform/modules/self-service/db.tf @@ -1,7 +1,7 @@ resource "aws_db_instance" "self_service" { name = "selfservice" engine = "postgres" - engine_version = "10.6" + engine_version = "10.10" storage_type = "gp2" instance_class = var.db_instance_class @@ -32,7 +32,7 @@ resource "aws_db_instance" "self_service" { iam_database_authentication_enabled = true apply_immediately = true - ca_cert_identifier = "rds-ca-2015" + ca_cert_identifier = "rds-ca-2019" lifecycle { prevent_destroy = true