-
-
Notifications
You must be signed in to change notification settings - Fork 1.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The psql password passed to the module is overridden by the one aws creates in Secret Manager #530
Comments
But it is set, its set to |
@bryantbiggs I double checked and I see here that this variable is set to false by default:
Why the discrepancy? |
Just an oversight - it should be |
Ok, I was probably looking at that for some reason. Thank you! |
If you feel like opening a PR to fix that issue, I'd be happy to merge that in 😬 |
Sure! |
I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further. |
Description
When creating a PostgreSQL RDS instance using the
terraform-aws-rds
module, I encountered an unexpected behavior where AWS auto-generates a password in the Secret Manager, even though I explicitly provided a username and password. This occurs despite the documentation stating that themanage_master_user_password
input is false by default.If I explicitly set
manage_master_user_password = false
then my password is actually used for the master user.Versions
Module version [Required]:
Terraform version:
Reproduction Code [Required]
Steps to reproduce the behavior:
Just spin up an RDS instance with set
username
andpassword
and check that the password you set doesn't work.Expected behavior
I expect that if
manage_master_user_password
is not set, then aws does not override my own password.Actual behavior
AWS auto-generates a password in the Secret Manager, even though I explicitly provided a username and password.
The text was updated successfully, but these errors were encountered: