Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable changing username and database name in rds-broker #262

Open
6 tasks
rbogle opened this issue Nov 9, 2022 · 0 comments
Open
6 tasks

Enable changing username and database name in rds-broker #262

rbogle opened this issue Nov 9, 2022 · 0 comments

Comments

@rbogle
Copy link

rbogle commented Nov 9, 2022

In order to fully restore a deleted database service instance for customers, we want to provide them a transparent restoration of the old db to the new db including the same credentials and database name.

Acceptance Criteria

  • GIVEN an operator is restoring an AWS rds snapshot to a new broker service instance
    AND the aws-broker stores a new password, username, and database name for the service instance
    WHEN we restore the snapshot and redirect the new service instance to the restored instance
    AND the username and database name no longer matches between the new and old
    THEN the operator should be able to replace the new username and database name in the broker with the restored ones
    SO that the service key credentials provided by the service broker match the credentials and connection info required to connect to the RDS instance in AWS.

Security considerations

Will improve and complete our ability to fully restore a tenant database when it has been completely deleted.

Implementation sketch

[links to background notes, sketches, and/or relevant documentation

  • Update the rds broker to have a field specifically for database name separate from the database instance name
  • Update the rds broker to fill in the database name when none exists with the default based on the database instance name (aws)
  • Update the rds broker to provide the database name as distinct from the instance name (aws) in the name field of the credentials
  • Bundle a script in the broker that can be run by an operator to change the username, database name for an rds instance.
  • Document using this script in the rds restoration runbook. https://github.com/cloud-gov/internal-docs/blob/main/docs/runbooks/AWS/restoring-rds.md
@rbogle rbogle transferred this issue from cloud-gov/product Nov 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant