Comments (5)
Hey @gramidt, thank you very much for raising this issue, this is much appreciated.
At the moment we are creating the RDS database using Terraform here and by default AWS RDS instances are still created with the old cert (as described in the docs you linked).
I see that there is some work in progress towards adding an extra argument to the aws_db_instance
Terraform resource that will allow to specify which AWS certificate to use hashicorp/terraform-provider-aws#10490. Using this argument seems like a good way to test creation of databases with the new certificate before it becomes default.
Then we will probably need to have a discussion about how to test this, especially on existing control-tower
deployments with the old certificate.
from control-tower.
I have added a story in our backlog to update the cert.
from control-tower.
Thanks for raising this @gramidt, I'd been dutifully ignoring the many emails from AWS :)
Fixed in ee3dbde, now working on cutting a release.
from control-tower.
Thank you so much, @irbekrm and @DanielJonesEB!
I apologize for the delayed response, but I am very glad you two were able to get this resolved.
Have a great rest of your weekend!
from control-tower.
Closing this as it has now been resolved.
Thanks for your help, @gramidt !
from control-tower.
Related Issues (20)
- Setting environment variables on the web node
- Configuration for RDS encrpytion HOT 1
- web node terminated with volume deleted in AWS. HOT 5
- `control-tower deploy` fails on "Waiting for the agent on VM '...' to be ready" after running from a non-static ip address (AWS) HOT 2
- Web node kept getting recreated. HOT 2
- Docker image put task hung for a long time. HOT 6
- Error from "control-tower info": bosh orchestrator down, unable to diagnose HOT 3
- Secrets for `aws_access_key_id` and `aws_secret_access_key` not saved to credhub when updating to 0.20.4
- Upgrade to version 0.22.1 caused web worker to fail HOT 5
- Options for dynamic scaling of workers? HOT 1
- Unable to access Credhub CLI
- All builds stuck "discovering any new versions", seems to be NATS cert expiry underneath, recover instructions not worked HOT 7
- Update README to state Control Tower is no longer being maintained HOT 6
- Terraform error running commands with standard set up
- Add "rotate NATS Certificate" job to self update jobs HOT 1
- self update job resets team permissions HOT 15
- Adopt Bionic Stemcells HOT 3
- Terraform tries to downgrade Postgres from 9.6.20 to 9.6.18 HOT 5
- Update bosh ci to at least 5.2.1 HOT 7
- Rotate the AWS access keys of the IAM users created by Terraform HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from control-tower.