Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(rds): prevent rendering deprecated credentials when creating a database cluster from a snapshot (under feature flag) #27174

Merged
merged 10 commits into from
Sep 25, 2023

Conversation

colifran
Copy link
Contributor

@colifran colifran commented Sep 18, 2023

This PR fixes a bug where an extra database secret is being generated when an RDS database cluster is being created from a snapshot.

On the DatabaseClusterFromSnapshotProps interface, we deprecated the credentials property and, at the same, introduced snapshotCredentials as the recommended replacement. However, the default behavior associated with the credentials property was not removed as doing so would introduce a breaking change for some users as detailed in this PR. As a result, users just using the recommended snapshotCredentials property to create a new RDS database cluster are seeing an extra, unwanted secret being created.

Closes #23815


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

@aws-cdk-automation aws-cdk-automation requested a review from a team September 18, 2023 02:58
@github-actions github-actions bot added bug This issue is a bug. effort/medium Medium work item – several days of effort p1 labels Sep 18, 2023
@mergify mergify bot added the contribution/core This is a PR that came from AWS. label Sep 18, 2023
@aws-cdk-automation aws-cdk-automation added the pr/needs-maintainer-review This PR needs a review from a Core Team Member label Sep 18, 2023
@colifran colifran changed the title fix(rds): prevent rendering deprecated credentials when creating a database cluster from a snapshot under feature flag fix(rds): prevent rendering deprecated credentials when creating a database cluster from a snapshot (under feature flag) Sep 20, 2023
@mergify
Copy link
Contributor

mergify bot commented Sep 25, 2023

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@mergify
Copy link
Contributor

mergify bot commented Sep 25, 2023

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation aws-cdk-automation removed the pr/needs-maintainer-review This PR needs a review from a Core Team Member label Sep 25, 2023
@mergify
Copy link
Contributor

mergify bot commented Sep 25, 2023

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation
Copy link
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
  • Commit ID: b834f0d
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

@mergify mergify bot merged commit 1fd22a7 into main Sep 25, 2023
13 checks passed
@mergify mergify bot deleted the colifran/extra-cluster-secret branch September 25, 2023 17:42
@mergify
Copy link
Contributor

mergify bot commented Sep 25, 2023

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug This issue is a bug. contribution/core This is a PR that came from AWS. effort/medium Medium work item – several days of effort p1
Projects
None yet
Development

Successfully merging this pull request may close these issues.

aws_rds: DatabaseClusterFromSnapshot creates a new secret when using SnapshotCredentials.fromSecret()
3 participants