Add extra_db_users variable to pass through any DB users that need da…

…tabase permissions

Signed-off-by: Matt Holmes <matthew.holmes@engineering.digital.dwp.gov.uk>

main.tf

@@ -135,6 +135,7 @@ module "kong_ecs" {
   postgres_config      = var.postgres_config
   postgres_host        = var.postgres_host
   db_password_arn      = var.db_password_arn
+  extra_db_users       = var.extra_db_users
 
   kong_vitals_enabled = var.kong_vitals_enabled
   kong_portal_enabled = var.kong_portal_enabled

modules/ecs/main.tf

@@ -90,6 +90,7 @@ data "template_file" "kong_task_definition_cp" {
     ulimits                     = jsonencode([4096])
     region                      = var.region
     access_log_format           = var.access_log_format
+    extra_db_users              = var.extra_db_users
     error_log_format            = var.error_log_format
     ssl_cert                    = var.ssl_cert
     ssl_key                     = var.ssl_key

modules/ecs/variables.tf

@@ -316,3 +316,8 @@ variable "kong_portal_enabled" {
   description = "Define whether or not the Kong Portal should be enabled."
   type        = string
 }
+
+variable "extra_db_users" {
+  description = "Define any extra Database Users that require permissions to access the Kong Database, e.g portal"
+  type        = string
+}

templates/ecs/kong_control_plane.tpl

@@ -13,6 +13,10 @@
       "name": "AWS_REGION",
       "value": "${region}"
     },
+    {
+      "name": "EXTRA_DB_USERS",
+      "value": "${extra_db_users}"
+    },
     {
       "name": "KONG_CLUSTER_MTLS",
       "value": "shared"
@@ -180,6 +184,10 @@
     "valueFrom": "${db_password_arn}"
     },
     {
+    "name": "PGPASSWORD",
+    "valueFrom": "${db_password_arn}"
+    },
+    {
     "name": "KONG_ADMIN_GUI_SESSION_CONF",
     "valueFrom": "${kong_admin_gui_session_conf}"
     },

variables.tf

@@ -799,3 +799,8 @@ variable "kong_portal_enabled" {
   type        = string
   default     = "on"
 }
+
+variable "extra_db_users" {
+  description = "Define any extra Database Users that require permissions to access the Kong Database, e.g portal"
+  type        = string
+}