From c6f510cdbbf5e8efb76d6c1644755218d6307060 Mon Sep 17 00:00:00 2001
From: Taylor Price <tayworm@gmail.com>
Date: Wed, 15 Jan 2020 16:05:57 -0700
Subject: [PATCH] use rds-ca-2019 by default

---
 main.tf      | 1 +
 variables.tf | 6 ++++++
 2 files changed, 7 insertions(+)

diff --git a/main.tf b/main.tf
index 182bee0..dc30152 100644
--- a/main.tf
+++ b/main.tf
@@ -24,6 +24,7 @@ resource "aws_docdb_cluster_instance" "cluster_instances" {
   identifier         = "${var.name}-${count.index}"
   cluster_identifier = aws_docdb_cluster.api_docdb.id
   instance_class     = var.cluster_instance_class
+  ca_cert_identifier = var.ca_cert_identifier
 }
 
 resource "aws_docdb_cluster_parameter_group" "api_docdb" {
diff --git a/variables.tf b/variables.tf
index 287df27..4ec804e 100644
--- a/variables.tf
+++ b/variables.tf
@@ -60,3 +60,9 @@ variable "apply_immediately" {
   description = "Specifies whether any cluster modifications are applied immediately, or during the next maintenance window."
   type        = bool
 }
+
+variable "ca_cert_identifier" {
+  default     = "rds-ca-2019"
+  description = "Optional, identifier of the CA certificate to use for DB instance"
+  type        = string
+}