RDS CA certificates expiring - Githubissues

avniproject / avni-infra

Other

0 stars 0 forks source link

RDS CA certificates expiring #22

Closed mahalakshme closed 2 months ago

mahalakshme commented 3 months ago

### Tasks

The affected RDS instances are below proddb02, proddb02-read, superset-db. - all are having "rds-ca-2019" as their Certificate Authority which is getting expired on August 22, 2024 and we need to update the Certificate Authority to make the DB healthy and security is upto date.
The changes we need to make is Modify the Certificate Authority to "rds-ca-rsa2048-g1(default)" which expires on May 20, 2061.

Suggestion:

Apply in following order:- superset-db, proddb02-read, proddb02

1t5j0y commented 2 months ago

@Balamuruganjeevi please check stagingdb as well. Apply changes to it before prod-read and prod