You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* Add DB Proxy feature for both RDS and Aurora
* Fixing var naming
* Fixing "" to bool values
* Index and name changes
* Fix resource name
* Adding missing indexes due to conditionals
* Trying other approach
* Alternative #2
* Skipping check
* Fixes here and there
* Typo in var name
* 1liner
* Adding some dep
* Ignoring count for now
* lower resource id for db
* Changing input
* Fixing engine family name
* Fixing not null
* Fixing secret for proxy connection
* Fixing skip final snapshot
* Fixing var check
* Fixes
* Fixes 2
* Logic invert
* Changing the way
* fix 2
* Debug
* Output var value
* debug 2
* Not null
* Forcing deletion
* Forcing a name
* Removing
* Debugging cleanup
* Cleanup, summary fix
* Output var fix
* Lifecycle fixes
* Alternative summary out
* Option #2
| `aws_rds_db_enable`| Boolean | Set to `true` to enable an RDS DB|
226
+
| `aws_rds_db_enable`| Boolean | Set to `true` to enable an RDS DB. |
227
+
| `aws_rds_db_proxy`| Boolean | Set to `true` to add a RDS DB Proxy. |
227
228
| `aws_rds_db_name`| String | The name of the database to create when the DB instance is created. If this parameter is not specified, no database is created in the DB instance. |
229
+
| `aws_rds_db_user`| String | Username for the db. Defaults to `dbuser`. |
228
230
| `aws_rds_db_engine`| String | Which Database engine to use. Defaults to `postgres`. |
229
231
| `aws_rds_db_engine_version`| String | Which Database engine version to use. |
230
232
| `aws_rds_db_security_group_name`| String | The name of the database security group. Defaults to `SG for ${aws_resource_identifier} - RDS`. |
233
+
| `aws_rds_db_allowed_security_groups` | String | Comma separated list of security groups to add to the DB SG. |
234
+
| `aws_rds_db_ingress_allow_all` | Boolean | Allow incoming traffic from 0.0.0.0/0. Defaults to `true`. |
235
+
| `aws_rds_db_publicly_accessible` | Boolean | Allow the database to be publicly accessible. Defaults to `false`. |
231
236
| `aws_rds_db_port`| String | Port where the DB listens to. |
232
237
| `aws_rds_db_subnets`| String | Specify which subnets to use as a list of strings. Example: `i-1234,i-5678,i-9101`. |
233
238
| `aws_rds_db_allocated_storage`| String | Storage size. Defaults to `10`. |
234
239
| `aws_rds_db_max_allocated_storage`| String | Max storage size. Defaults to `0` to disable auto-scaling. |
235
240
| `aws_rds_db_instance_class`| String | DB instance server type. Defaults to `db.t3.micro`. |
236
-
| `aws_rds_db_user`| String | Username for the db. Defaults to `dbuser`. |
237
-
| `aws_rds_cloudwatch_logs_exports`| String | Set of log types to enable for exporting to CloudWatch logs. Defaults to `postgresql`. MySQL and MariaDB: `audit, error, general, slowquery`. PostgreSQL: `postgresql, upgrade`. MSSQL: `agent , error`. Oracle: `alert, audit, listener, trace`. |
238
-
| `aws_rds_additional_tags` | JSON | Add additional tags to the terraform [default tags](https://www.hashicorp.com/blog/default-tags-in-the-terraform-aws-provider), any tags put here will be added to RDS provisioned resources.|
241
+
| `aws_rds_db_final_snapshot` | String | If wanted, add a snapshot name. Leave emtpy if not. |
242
+
| `aws_rds_db_restore_snapshot_identifier` | String | Name of the snapshot to create the databse from. |
243
+
| `aws_rds_db_cloudwatch_logs_exports`| String | Set of log types to enable for exporting to CloudWatch logs. Defaults to `postgresql`. MySQL and MariaDB: `audit, error, general, slowquery`. PostgreSQL: `postgresql, upgrade`. MSSQL: `agent , error`. Oracle: `alert, audit, listener, trace`. |
244
+
| `aws_rds_db_additional_tags` | JSON | Add additional tags to the terraform [default tags](https://www.hashicorp.com/blog/default-tags-in-the-terraform-aws-provider), any tags put here will be added to RDS provisioned resources.|
| `aws_aurora_enable` | Boolean | Set to `true` to enable an [Aurora database](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_AuroraOverview.html). (Postgres or MySQL). |
252
+
| `aws_aurora_proxy`| Boolean | Set to `true` to add an Aurora DB Proxy |
246
253
| `aws_aurora_engine` | String | Which Database engine to use. Default is `aurora-postgresql`.|
247
254
| `aws_aurora_engine_version` | String | Specify database version. More information [Postgres](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraPostgreSQL.Updates.20180305.html) or [MySQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraMySQLReleaseNotes/Welcome.html). Default is `11.17`. (Postgres) |
248
255
| `aws_aurora_database_group_family` | String | Specify aws database group family. Default is `aurora-postgresql11`. See [this](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/rds/create-db-parameter-group.html).|
@@ -261,6 +268,26 @@ The following inputs can be used as `step.with` keys
| `aws_db_proxy_client_password_auth_type` | String | Overrides auth type. Using `MYSQL_NATIVE_PASSWORD`, `POSTGRES_SCRAM_SHA_256`, and `SQL_SERVER_AUTHENTICATION` depending on the database family. |
280
+
| `aws_db_proxy_tls` | Boolean | Make TLS a requirement for connections. Defaults to `true`.|
281
+
| `aws_db_proxy_security_group_name` | String | Name for the proxy security group. Defaults to `aws_resource_identifier`. |
282
+
| `aws_db_proxy_database_security_group_allow` | Boolean | If true, will add an incoming rule from every security group associated with the DB. |
283
+
| `aws_db_proxy_allowed_security_group` | String | Comma separated list fo allowed security groups to add.|
284
+
| `aws_db_proxy_allow_all_incoming` | Boolean | Allow all incoming traffic to the DB Proxy. Mind that the proxy is only available from the internal network except manually exposed. Defaults to `ƒalse`.|
285
+
| `aws_db_proxy_cloudwatch_enable` | Boolean | Toggle Cloudwatch logs. Will be stored in `/aws/rds/proxy/rds_proxy.name`. |
286
+
| `aws_db_proxy_cloudwatch_retention_days` | String | Number of days to retain cloudwatch logs. Defaults to `14`. |
287
+
| `aws_db_proxy_additional_tags` | JSON | Add additional tags to the ter added to aurora provisioned resources.|
Copy file name to clipboardExpand all lines: action.yaml
+117-7Lines changed: 117 additions & 7 deletions
Original file line number
Diff line number
Diff line change
@@ -308,9 +308,15 @@ inputs:
308
308
aws_rds_db_enable:
309
309
description: 'Set to true to enable an RDS DB.'
310
310
required: false
311
+
aws_rds_db_proxy:
312
+
description: 'Set to true to add a RDS DB Proxy'
313
+
required: false
311
314
aws_rds_db_name:
312
315
description: 'The name of the database to create when the DB instance is created.'
313
316
required: false
317
+
aws_rds_db_user:
318
+
description: 'Username for the db. Defaults to dbuser.'
319
+
required: false
314
320
aws_rds_db_engine:
315
321
description: 'Which Database engine to use. Default is postgres'
316
322
required: false
@@ -320,6 +326,15 @@ inputs:
320
326
aws_rds_db_security_group_name:
321
327
description: 'The name of the database security group. Defaults to SG for aws_resource_identifier - RDS.'
322
328
required: false
329
+
aws_rds_db_allowed_security_groups:
330
+
description: 'Comma separated list of security groups to add to the DB SG'
331
+
required: false
332
+
aws_rds_db_ingress_allow_all:
333
+
description: 'Allow incoming traffic from 0.0.0.0/0.'
334
+
required: false
335
+
aws_rds_db_publicly_accessible:
336
+
description: 'Allow the database to be publicly accessible.'
337
+
required: false
323
338
aws_rds_db_port:
324
339
description: ' Port where the DB listens to.'
325
340
required: false
@@ -335,20 +350,26 @@ inputs:
335
350
aws_rds_db_instance_class:
336
351
description: 'DB instance server type. Defaults to db.t3.micro.'
337
352
required: false
338
-
aws_rds_db_user:
339
-
description: 'Username for the db. Defaults to dbuser.'
353
+
aws_rds_db_final_snapshot:
354
+
description: 'Generates a snapshot of the database before deletion.'
355
+
required: false
356
+
aws_rds_db_restore_snapshot_identifier:
357
+
description: 'Name of the snapshot to restore the database from.'
340
358
required: false
341
-
aws_rds_cloudwatch_logs_exports:
359
+
aws_rds_db_cloudwatch_logs_exports:
342
360
description: 'Set of log types to enable for exporting to CloudWatch logs.'
343
361
required: false
344
-
aws_rds_additional_tags:
362
+
aws_rds_db_additional_tags:
345
363
description: 'A JSON object of additional tags that will be included on created resources. Example: `{"key1": "value1", "key2": "value2"}`'
346
364
required: false
347
365
348
366
# AWS Aurora
349
367
aws_aurora_enable:
350
368
description: 'Set to "true" to enable a postgres database'
351
369
required: false
370
+
aws_aurora_proxy:
371
+
description: 'Set to true to add a RDS DB Proxy'
372
+
required: false
352
373
aws_aurora_engine:
353
374
description: 'Which Database engine to use'
354
375
required: false
@@ -395,6 +416,50 @@ inputs:
395
416
description: 'A JSON object of additional tags that will be included on created resources. Example: `{"key1": "value1", "key2": "value2"}`'
396
417
required: false
397
418
419
+
# RDS Proxy
420
+
aws_db_proxy_enable:
421
+
description: 'Toggle DB Proxy creation'
422
+
required: false
423
+
aws_db_proxy_name:
424
+
description: 'DB Proxy name'
425
+
required: false
426
+
aws_db_proxy_database_id:
427
+
description: 'Database ID to create proxy for'
428
+
required: false
429
+
aws_db_proxy_cluster:
430
+
description: 'Define if Database is a cluster or not'
431
+
required: false
432
+
aws_db_proxy_secret_name:
433
+
description: 'Name of the secret containing DB parameters to connect to'
434
+
required: false
435
+
aws_db_proxy_client_password_auth_type:
436
+
description: 'Auth type to use, will use the following, depending on DB the family. MYSQL_NATIVE_PASSWORD, POSTGRES_SCRAM_SHA_256, and SQL_SERVER_AUTHENTICATION'
437
+
required: false
438
+
aws_db_proxy_tls:
439
+
description: 'Toogle TLS enforcement for connection'
440
+
required: false
441
+
aws_db_proxy_security_group_name:
442
+
description: 'Name for the proxy security group. Default to aws_resource_identifier if none.'
443
+
required: false
444
+
aws_db_proxy_database_security_group_allow:
445
+
description: 'Will add an incoming rule from every security group associated with the DB'
446
+
required: false
447
+
aws_db_proxy_allowed_security_group:
448
+
description: 'Comma separated list of SG Ids to add.'
449
+
required: false
450
+
aws_db_proxy_allow_all_incoming:
451
+
description: 'Allow all incoming traffic to the DB Proxy. Mind that the proxy is only available from the internal network except manually exposed.'
452
+
required: false
453
+
aws_db_proxy_cloudwatch_enable:
454
+
description: 'Toggle Cloudwatch logs. Will be stored in /aws/rds/proxy/rds_proxy.name'
455
+
required: false
456
+
aws_db_proxy_cloudwatch_retention_days:
457
+
description: 'Number of days to retain logs'
458
+
required: false
459
+
aws_db_proxy_additional_tags:
460
+
description: 'A list of strings that will be added to created resources'
461
+
required: false
462
+
398
463
# Docker
399
464
docker_install:
400
465
description: 'Define if docker should be installed. After this, docker-compose up will be excecuted.'
0 commit comments