Skip to content

Upgrade RDS PostgreSQL from 13 to 15 #152

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ale210 merged 2 commits into from
Aug 11, 2026
Merged

Upgrade RDS PostgreSQL from 13 to 15 #152

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
eec5e70
Upgrade RDS PostgreSQL from 13 to 15
ale210 Aug 11, 2026
02c28a2
terraform-docs: automated updates to Terraform modules README.md
github-actions[bot] Aug 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions terraform/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@
| Name | Type |
|------|------|
| [aws_db_instance.default](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance) | resource |
| [aws_db_parameter_group.postgres15](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_parameter_group) | resource |
| [aws_iam_policy.incubator_builder](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_policy) | resource |
| [aws_caller_identity.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/caller_identity) | data source |

Expand Down
28 changes: 21 additions & 7 deletions terraform/database.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,25 @@
import {
to = aws_db_instance.default
id = "incubator-prod-database"
}
# RDS rejects a major version upgrade that keeps a parameter group from the old
# engine family, and AWS creates default groups lazily -- default.postgres15
# does not exist in this account. A managed group also gives future tuning
# somewhere to live.
#
# password_encryption is deliberately left unset: postgres15 sets no value, so
# the engine default (scram-sha-256) applies to roles created after the upgrade.
# See hackforla/incubator#150 for the decision.
resource "aws_db_parameter_group" "postgres15" {
name = "incubator-prod-postgres15"
family = "postgres15"
description = "incubator-prod-database, PostgreSQL 15"

tags = {
Name = "incubator-prod-postgres15"
terraform_managed = "true"
}
}

resource "aws_db_instance" "default" {
allocated_storage = 100
allow_major_version_upgrade = true
apply_immediately = true
auto_minor_version_upgrade = true
availability_zone = "us-west-2a"
Expand All @@ -20,14 +34,14 @@ resource "aws_db_instance" "default" {
enabled_cloudwatch_logs_exports = ["postgresql", "upgrade"]
engine = "postgres"
engine_lifecycle_support = "open-source-rds-extended-support"
engine_version = "13.20"
engine_version = "15"
iam_database_authentication_enabled = false
identifier = "incubator-prod-database"
instance_class = "db.t3.small"
multi_az = false
network_type = "IPV4"
option_group_name = "default:postgres-13"
parameter_group_name = "default.postgres13"
option_group_name = "default:postgres-15"
parameter_group_name = aws_db_parameter_group.postgres15.name
port = 5432
publicly_accessible = true
skip_final_snapshot = true
Expand Down
Loading