Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(rds): proxy cannot connect to cluster/instance #12953

Merged
merged 2 commits into from
Feb 15, 2021

Conversation

skinny85
Copy link
Contributor

@skinny85 skinny85 commented Feb 9, 2021

By default, when creating a Proxy,
we were not creating a Security Group for it,
and because of that, the Proxy could not connect to the Cluster/Instance.

See docs at: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

@skinny85 skinny85 requested a review from nija-at February 9, 2021 23:03
@skinny85 skinny85 self-assigned this Feb 9, 2021
@gitpod-io
Copy link

gitpod-io bot commented Feb 9, 2021

@github-actions github-actions bot added the @aws-cdk/aws-rds Related to Amazon Relational Database label Feb 9, 2021
@mergify mergify bot added the contribution/core This is a PR that came from AWS. label Feb 9, 2021
Copy link
Contributor

@nija-at nija-at left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Our contribution guide suggests using lower case for PR titles. I suppose this is in response to the guideline in conventional commits.

This should likely be "fix(rds): proxy cannot connect to cluster/instance"

packages/@aws-cdk/aws-rds/lib/proxy.ts Show resolved Hide resolved
packages/@aws-cdk/aws-rds/lib/proxy.ts Show resolved Hide resolved
By default, when creating a Proxy,
we were not creating a Security Group for it,
and because of that, the Proxy could not connect to the Cluster/Instance.
@skinny85 skinny85 force-pushed the fix/rds-proxy-connectivity branch from 236cbfd to 4bb2352 Compare February 12, 2021 00:22
@skinny85
Copy link
Contributor Author

@nija-at thanks for the review! This is ready for another round.

@skinny85 skinny85 requested a review from nija-at February 12, 2021 00:22
@skinny85 skinny85 changed the title fix(rds): Proxy cannot connect to Cluster/Instance fix(rds): proxy cannot connect to cluster/instance Feb 12, 2021
@nija-at nija-at added the pr/do-not-merge This PR should not be merged at this time. label Feb 15, 2021
Copy link
Contributor

@nija-at nija-at left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Provisional approval.

Please consider the comments below as a best practice, for this and in the future.

@@ -138,6 +136,22 @@ export = {
DBInstanceIdentifiers: ABSENT,
TargetGroupName: 'default',
}));
expect(stack).to(haveResourceLike('AWS::EC2::SecurityGroupIngress', {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would much prefer to see a separate test case for these. Something like 'db proxy configures the tcp security ingress'. This keeps test cases small and understandable, rather than a large set of 'expects' and fewer test cases.

@@ -221,6 +236,10 @@ export = {
'my-cluster',
],
}));
expect(stack).to(haveResourceLike('AWS::EC2::SecurityGroup', {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same here.

@skinny85 skinny85 removed the pr/do-not-merge This PR should not be merged at this time. label Feb 15, 2021
@mergify
Copy link
Contributor

mergify bot commented Feb 15, 2021

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation
Copy link
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildProject89A8053A-LhjRyN9kxr8o
  • Commit ID: 0a69f50
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

@mergify
Copy link
Contributor

mergify bot commented Feb 15, 2021

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify mergify bot merged commit 4b0abbc into aws:master Feb 15, 2021
@skinny85 skinny85 deleted the fix/rds-proxy-connectivity branch February 15, 2021 23:28
NovakGu pushed a commit to NovakGu/aws-cdk that referenced this pull request Feb 18, 2021
By default, when creating a Proxy,
we were not creating a Security Group for it,
and because of that, the Proxy could not connect to the Cluster/Instance.

See docs at: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
eladb pushed a commit that referenced this pull request Feb 22, 2021
By default, when creating a Proxy,
we were not creating a Security Group for it,
and because of that, the Proxy could not connect to the Cluster/Instance.

See docs at: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
@civilizeddev
Copy link
Contributor

fixes #8919

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
@aws-cdk/aws-rds Related to Amazon Relational Database contribution/core This is a PR that came from AWS.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants