Skip to content

Commit 86eec09

Browse files
Fix: Add missing TFE_DATABASE_PASSWORDLESS_AWS_USE_INSTANCE_PROFILE for postgres passwordless
This critical fix adds the missing TFE_ prefixed environment variables that the Go config system requires to properly configure AWS RDS IAM authentication. Without these variables, the terraform-enterprise Go application cannot read the passwordless configuration via envconfig, causing 502 errors. Added: - TFE_DATABASE_PASSWORDLESS_AWS_USE_INSTANCE_PROFILE (for Go config system) - TFE_DATABASE_PASSWORDLESS_AWS_REGION (for Go config system) Kept existing: - DATABASE_AUTH_USE_AWS_IAM (for Atlas Ruby application) - DATABASE_AUTH_AWS_DB_REGION (for Atlas Ruby application) This matches the pattern used in redis_config.tf and ensures both configuration systems receive the required environment variables.
1 parent a69de1c commit 86eec09

File tree

1 file changed

+15
-13
lines changed

1 file changed

+15
-13
lines changed

modules/runtime_container_engine_config/database_config.tf

Lines changed: 15 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -3,19 +3,21 @@
33

44
locals {
55
database = {
6-
TFE_DATABASE_USER = var.database_user
7-
TFE_DATABASE_PASSWORD = var.database_password
8-
TFE_DATABASE_HOST = var.database_host
9-
TFE_DATABASE_NAME = var.database_name
10-
TFE_DATABASE_PARAMETERS = var.database_parameters
11-
TFE_DATABASE_USE_MTLS = var.database_use_mtls
12-
TFE_DATABASE_CA_CERT_FILE = var.database_ca_cert_file
13-
TFE_DATABASE_CLIENT_CERT_FILE = var.database_client_cert_file
14-
TFE_DATABASE_CLIENT_KEY_FILE = var.database_client_key_file
15-
TFE_DATABASE_PASSWORDLESS_AZURE_USE_MSI = var.database_passwordless_azure_use_msi
16-
TFE_DATABASE_PASSWORDLESS_AZURE_CLIENT_ID = var.database_passwordless_azure_client_id
17-
DATABASE_AUTH_USE_AWS_IAM = var.database_passwordless_aws_use_iam
18-
DATABASE_AUTH_AWS_DB_REGION = var.database_passwordless_aws_region
6+
TFE_DATABASE_USER = var.database_user
7+
TFE_DATABASE_PASSWORD = var.database_password
8+
TFE_DATABASE_HOST = var.database_host
9+
TFE_DATABASE_NAME = var.database_name
10+
TFE_DATABASE_PARAMETERS = var.database_parameters
11+
TFE_DATABASE_USE_MTLS = var.database_use_mtls
12+
TFE_DATABASE_CA_CERT_FILE = var.database_ca_cert_file
13+
TFE_DATABASE_CLIENT_CERT_FILE = var.database_client_cert_file
14+
TFE_DATABASE_CLIENT_KEY_FILE = var.database_client_key_file
15+
TFE_DATABASE_PASSWORDLESS_AZURE_USE_MSI = var.database_passwordless_azure_use_msi
16+
TFE_DATABASE_PASSWORDLESS_AZURE_CLIENT_ID = var.database_passwordless_azure_client_id
17+
TFE_DATABASE_PASSWORDLESS_AWS_USE_INSTANCE_PROFILE = var.database_passwordless_aws_use_iam
18+
TFE_DATABASE_PASSWORDLESS_AWS_REGION = var.database_passwordless_aws_region
19+
DATABASE_AUTH_USE_AWS_IAM = var.database_passwordless_aws_use_iam
20+
DATABASE_AUTH_AWS_DB_REGION = var.database_passwordless_aws_region
1921
}
2022
database_configuration = local.disk ? {} : local.database
2123
explorer_database = {

0 commit comments

Comments
 (0)