-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve RDS configurability #206
Comments
Added the database instance type configuration option in GHGC: https://github.com/US-GHG-Center/ghgc-backend/pull/16/files |
@amarouane-ABDELHAK I added you to this issue because you've already done some of the work in GHG. Hope that's OK! Will probably ping you on the VEDA PRs when we integrate the changes... |
I have submitted a PR to configure to make the size and the type of RDS configurable: RDS PR |
Here's GHGC's update for configuring RDS encryption US-GHG-Center#34 |
Update: most unencrypted RDS have been removed we still need to replace a backend-prod and a fapi-prod with encrypted instances. |
This issue was intended to add configurability to RDS veda-backend and we can now deploy new instances as encrypted, and for existing/new we can configure postgres engine version, instance type and size so the task is complete. The operational need will be resolved in the mono-repo production deployments in progress. |
What
Why
Hard coded default instance type is small and will need to be increased as usage increases (especially public facing implementations like GHGC)
Postgresql engine version should be updated periodically for latest improvements and security upgrades from AWS and veda-backend CDK should support instantiating new versions of the backend with the latest postgresql engine.
PI Objective
https://github.com/NASA-IMPACT/veda-architecture/issues/285
AC
[ ] All RDS instances in MCP are encrypted(RDS for veda-backend is fully configurable)The text was updated successfully, but these errors were encountered: