@@ -6,8 +6,8 @@ module "db" {
6
6
7
7
engine = " postgres"
8
8
engine_version = var. postgres_version
9
- family = " postgres13 "
10
- major_engine_version = " 13 "
9
+ family = " postgres ${ var . postgres_version } "
10
+ major_engine_version = var . postgres_version
11
11
instance_class = var. instance_class
12
12
13
13
password = var. database_password
@@ -23,14 +23,17 @@ module "db" {
23
23
multi_az = var. multi_az
24
24
subnet_ids = var. database_subnet_ids
25
25
vpc_security_group_ids = [aws_security_group . database . id ]
26
+ create_db_subnet_group = true
27
+ db_subnet_group_name = " ${ var . db_identifier } -subnet-group"
26
28
27
- maintenance_window = var. maintenance_window
28
- backup_window = var. backup_window
29
-
29
+ maintenance_window = var. maintenance_window
30
+ backup_window = var. backup_window
30
31
backup_retention_period = var. backup_retention_period
31
32
skip_final_snapshot = true
32
33
33
34
tags = var. tags
35
+
36
+ depends_on = [aws_security_group . database ]
34
37
}
35
38
36
39
resource "aws_security_group" "database" {
@@ -44,5 +47,18 @@ resource "aws_security_group" "database" {
44
47
security_groups = [var . eks_security_group_id ]
45
48
}
46
49
47
- tags = var. tags
50
+ egress {
51
+ from_port = 0
52
+ to_port = 0
53
+ protocol = " -1"
54
+ cidr_blocks = [" 0.0.0.0/0" ]
55
+ }
56
+
57
+ tags = merge (var. tags , {
58
+ Name = " ${ var . db_identifier } -sg"
59
+ })
60
+
61
+ lifecycle {
62
+ create_before_destroy = true
63
+ }
48
64
}
0 commit comments