Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 17:08:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 83

Suggested change for set recovery window to 0 (#6278)

Browse source 
Suggesting setting the key so failed builds can be re-applied without errors. If your terraform build fails and you need to destroy and re-apply, without a recovery window of 0, Secret Manager doesn't allow you to delete the secret and that named secret has to wait 7 days to be deleted.
This commit is contained in:
Rod Christiansen 2022-06-27 07:40:59 -07:00 committed by GitHub
parent 39cb121bb7
commit b1465bfa59
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
infrastructure/dogfood/terraform/aws/rds.tf
View file

@ -6,6 +6,7 @@ resource "random_password" "database_password" {
// possibility of providing this capability in the future.
resource "aws_secretsmanager_secret" "database_password_secret" { #tfsec:ignore:aws-ssm-secret-use-customer-key:exp:2022-07-01
name = "/fleet/database/password/master"
recovery_window_in_days = 0
}
resource "aws_secretsmanager_secret_version" "database_password_secret_version" {
@ -114,4 +115,4 @@ resource "aws_rds_cluster_parameter_group" "example_mysql" {
name = "${local.name}-aurora-mysql-cluster-parameter-group"
family = "aurora-mysql5.7"
description = "${local.name}-aurora-mysql-cluster-parameter-group"
}
}