Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RDS certificates support #197

Open
bquintas opened this issue Jun 19, 2024 · 2 comments
Open

RDS certificates support #197

bquintas opened this issue Jun 19, 2024 · 2 comments

Comments

@bquintas
Copy link

When trying to deploy this in a container service on AWS I can never establish a connection to RDS PG, due to missing certificates, I tried passing PEM files as env variables using CERTIFICATE_AUTHORITIES and CERTIFICATE_AUTHORITIES_BASE64 but always get missing files error.
I've noticed that the current version of the script uses v4.30.14 of cf build pack which only contains a single PEM amazon-rds-ca.pem while the newer versions include the regional pems and apparently also error handling.
Are you planning to bump the cf version soon or do you have a recommendation for how to add the right certs in the build?

@zlogic
Copy link
Member

zlogic commented Jun 19, 2024

@bquintas The default branch is a legacy branch - unfortunately, some users set up pipelines to always pull the default branch, and we cannot update the default branch without breaking those pipelines.

The latest branch (or a tagged version) uses the latest cf-buildpack.

@mattmarich-wrstbnd
Copy link

Can we please get a new tagged version soon including the latest cf-mendix-buildpack (or >= v5.0.13 where the aws certs were added)? We've been on v5.0.4 for 8 months so I feel we're due for an update. docker-mendix-buildpack v5.0.4 uses cf-mendix-buildpack v5.0.9 which doesn't have the latest aws cert additions. In addition to the aws certs, it would also be nice to select a newer version of openjdk, I'm assuming the community would really like if ya'll bumped to using cf-mendix-buildpack:v5.0.15 (which added openjdk 17 and 21 support).

I can't speak for other teams but we really can't rely on running the latest branch in our pipelines so fingers crossed for a new tagged release!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants