Amazon RDS and Aurora to STACKIT PostgreSQL Flex

module "orders_rds" {
  source  = "terraform-aws-modules/rds-aurora/aws"
  version = "7.7.1"

  name           = "${var.environment_name}-orders"
  engine         = "aurora-postgresql"
  engine_version = "15.10"
  instance_class = "db.t3.medium"

  instances = {
    one = {}
  }

  vpc_id  = var.vpc_id
  subnets = var.subnet_ids

  allowed_security_groups = concat(var.allowed_security_group_ids, [var.orders_security_group_id])

  master_password        = random_string.orders_db_master.result
  create_random_password = false
  database_name          = "orders"
  storage_encrypted      = true
  apply_immediately      = true
  skip_final_snapshot    = true

  create_db_parameter_group = true
  db_parameter_group_name   = "${var.environment_name}-orders"
  db_parameter_group_family = "aurora-postgresql15"

  create_db_cluster_parameter_group = true
  db_cluster_parameter_group_name   = "${var.environment_name}-orders"
  db_cluster_parameter_group_family = "aurora-postgresql15"

  tags = var.tags
}

resource "stackit_postgresflex_user" "dependencies_orders_rds_this" {
  project_id  = var.project_id
  instance_id = stackit_postgresflex_instance.dependencies_orders_rds_this.instance_id
  username    = "root"
  roles       = var.orders_rds_admin_roles
}

output "dependencies_orders_rds_this_admin_password" {
  description = "The password STACKIT generated for the master user created by stackit_postgresflex_user for module.dependencies.module.orders_rds.aws_rds_cluster.this. Sensitive: tofu output hides it from the plan, the state holds it in plain text."
  value       = stackit_postgresflex_user.dependencies_orders_rds_this.password
  sensitive   = true
}

resource "stackit_postgresflex_database" "dependencies_orders_rds_this_orders" {
  project_id  = var.project_id
  instance_id = stackit_postgresflex_instance.dependencies_orders_rds_this.instance_id
  name        = "orders"
  owner       = stackit_postgresflex_user.dependencies_orders_rds_this.username
}

module "catalog_rds" {
  source  = "terraform-aws-modules/rds-aurora/aws"
  version = "7.7.1"

  name                        = "${var.environment_name}-catalog"
  engine                      = "aurora-mysql"
  engine_version              = "8.0"
  instance_class              = "db.t3.medium"
  allow_major_version_upgrade = true

  instances = {
    one = {}
  }

  vpc_id  = var.vpc_id
  subnets = var.subnet_ids

  allowed_security_groups = concat(var.allowed_security_group_ids, [var.catalog_security_group_id])

  master_password        = random_string.catalog_db_master.result
  create_random_password = false
  database_name          = "catalog"
  storage_encrypted      = true
  apply_immediately      = true
  skip_final_snapshot    = true

  create_db_parameter_group = true
  db_parameter_group_name   = "${var.environment_name}-catalog"
  db_parameter_group_family = "aurora-mysql8.0"

  create_db_cluster_parameter_group = true
  db_cluster_parameter_group_name   = "${var.environment_name}-catalog"
  db_cluster_parameter_group_family = "aurora-mysql8.0"

  tags = var.tags
}

resource "stackit_mariadb_instance" "dependencies_catalog_rds_this" {
  project_id = var.project_id
  name       = "retail-store-ecs-catalog"
  version    = var.catalog_rds_version
  plan_name  = var.catalog_rds_plan_name
  parameters = {
    sgw_acl = join(",", coalescelist(var.catalog_rds_allowed_cidrs, stackit_ske_cluster.retail_app_ecs_cluster.egress_address_ranges))
  }
}

resource "stackit_mariadb_credential" "dependencies_catalog_rds_this" {
  project_id  = var.project_id
  instance_id = stackit_mariadb_instance.dependencies_catalog_rds_this.instance_id
}