[PRMP-120] Readding the postgresql provider, which is required for de…

…commissioning resources already in the state
nhsconnect · Nov 13, 2024 · 867dcff · 867dcff
1 parent c0fabc4
commit 867dcff
Show file tree

Hide file tree

Showing 3 changed files with 31 additions and 3 deletions.
diff --git a/tasks b/tasks
@@ -209,13 +209,17 @@ function tf_plan {
 
 function tf_plan_db_roles {
   operation=$1
+  db_host=$(_get_aws_ssm_secret "/repo/${NHS_ENVIRONMENT}/output/prm-deductions-ehr-repository/db-host")
+  db_username=$(_get_aws_ssm_secret "/repo/${NHS_ENVIRONMENT}/user-input/ehr-repo-db-username")
+  db_password=$(_get_aws_ssm_secret "/repo/${NHS_ENVIRONMENT}/user-input/ehr-repo-db-password")
+  db_name=$(_get_aws_ssm_secret "/repo/${NHS_ENVIRONMENT}/output/prm-deductions-ehr-repository/db-name")
 
   tf_init_db_roles
   terraform get # modules
   if [[ "${operation}" == "create" ]]; then
-    terraform plan -var environment=$NHS_ENVIRONMENT -out="db-roles.tfplan"
+    terraform plan -var db_host=$db_host -var db_username=$db_username -var db_password=$db_password -var environment=$NHS_ENVIRONMENT -var db_name=$db_name -out="db-roles.tfplan"
   elif [[ "${operation}" == "destroy" ]]; then
-    terraform plan -var environment=$NHS_ENVIRONMENT -out="db-roles.tfplan" -destroy
+    terraform plan -var db_host=$db_host -var db_username=$db_username -var db_password=$db_password -var environment=$NHS_ENVIRONMENT -var db_name=$db_name -out="db-roles.tfplan" -destroy
   else
     echo "Unknown operation (should be create or destroy), got: ${operation}"
     exit 1

diff --git a/terraform-db-roles/main.tf b/terraform-db-roles/main.tf
@@ -3,11 +3,25 @@ provider "aws" {
   region  = var.region
 }
 
+provider "postgresql" {
+  host            = var.db_host
+  port            = var.db_port
+  database        = var.db_name
+  username        = var.db_username
+  password        = var.db_password
+  connect_timeout = 15
+  superuser       = false
+}
+
 terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
       version = "3.44.0"
     }
+    postgresql = {
+      source  = "cyrilgdn/postgresql"
+      version = "1.13.0"
+    }
   }
-}
+}
diff --git a/terraform-db-roles/variables.tf b/terraform-db-roles/variables.tf
@@ -14,3 +14,13 @@ variable "component_name" {
 }
 
 variable "environment" {}
+
+## RDS
+variable "db_name" {}
+variable "db_host" {}
+variable "db_username" {}
+variable "db_password" {}
+variable "db_port" {
+  type    = string
+  default = "5432"
+}