feat: allow to set CA certificate to use

opzkit · Oct 14, 2023 · 0e97d93 · 0e97d93
1 parent 92c62ee
commit 0e97d93
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -59,6 +59,7 @@ resource "aws_rds_cluster_instance" "writer" {
   performance_insights_kms_key_id       = var.kms_key_arn == "" ? null : var.kms_key_arn
   performance_insights_enabled          = local.performance_insights_writer_enabled
   performance_insights_retention_period = local.performance_insights_writer_enabled ? var.performance_insights_retention_period : null
+  ca_cert_identifier                    = var.ca_cert_identifier
 }
 
 resource "aws_rds_cluster_instance" "reader" {
@@ -74,6 +75,7 @@ resource "aws_rds_cluster_instance" "reader" {
   performance_insights_kms_key_id       = var.kms_key_arn == "" ? null : var.kms_key_arn
   performance_insights_enabled          = local.performance_insights_reader_enabled
   performance_insights_retention_period = local.performance_insights_reader_enabled ? var.performance_insights_retention_period : null
+  ca_cert_identifier                    = var.ca_cert_identifier
 }
 
 resource "aws_rds_cluster_parameter_group" "cluster_parameters" {

diff --git a/vars.tf b/vars.tf
@@ -77,3 +77,9 @@ variable "performance_insights_retention_period" {
   Performance insights retention period in days, 7 days is free of charge. Read more here: https://aws.amazon.com/rds/performance-insights/pricing
 EOT
 }
+
+variable "ca_cert_identifier" {
+  type        = string
+  default     = null
+  description = "The CA cert identifier to use"
+}