AWS postgress RDS v12.9 upgrade
# support
s
Hi team by following the official doc we have installed medplum, but it has created rds postgress v12.9 but aws support for 12.9 going to be removed from march 1 2025. How to upgrade it to latest and also will it had any impact on api's?
Hi @reshma any views on this?
r
We are actively testing it and working through it. e.g. https://github.com/medplum/medplum/pull/5362
s
Any plans to release it for production environment?
r
We are first working through upgrading our Hosted service onto Postgres 16. After that, we will release documentation for how self-hosted customers can upgrade. We appreciate your patience
a
hi guys. We're interested in hearing more about upgrading our self-hosted RDS version. Are there any updates yet? Looking through the CDK source code it looks like it still defaults to 12.9 but it can be updated through rdsInstanceVersion: https://github.com/medplum/medplum/blob/2ee4748e94638dab6d43a9d8f5bd67078f8e2784/packages/cdk/src/backend.ts#L103
r
@Alejandro Arias - are you running in production? Or just a test environment? We have a blog post here related for reference: https://www.medplum.com/blog/zero-downtime-postgres-major-version-upgrade
a
hi, thanks for replying. We're running a Dev environment but will be soon deploying to Production soon. We upgraded our Dev RDS to PG16 since it looks like the Medplum app supports it, but my main ask here is if you guys could update the default version that the CDK resource defaults to + adding
rdsInstanceVersion
to the docs since we didn't see it there
r
thanks for the feedback @Alejandro Arias ! We can make those changes
s
If I'm updating through rdsInstanceVersion then I'm getting this error. Db cluster medplumstaging-backenddatabasecluster cannot be in the inaccessible-encryption-credentials-recoverable state. Any suggestions on how I can resolve this?
i
@sandydasari This error indicates that your Aurora cluster's encryption credentials are in a recoverable but currently inaccessible state, which blocks major version upgrades what does
Copy code
aws kms describe-key --key-id <your-kms-key-id>
output for you?
s
Copy code
{
  "KeyMetadata": {
    "AWSAccountId": "977099021799",
    "KeyId": "5f350bc0-2fd1-43bc-b8bf-85f87a6b41c2",
    "Arn": "arn:aws:kms:us-east-1:977099021799:key/5f350bc0-2fd1-43bc-b8bf-85f87a6b41c2",
    "CreationDate": "2025-05-06T18:11:14.312000+05:30",
    "Enabled": true,
    "Description": "Default key that protects my RDS database volumes when no other key is defined",
    "KeyUsage": "ENCRYPT_DECRYPT",
    "KeyState": "Enabled",
    "Origin": "AWS_KMS",
    "KeyManager": "AWS",
    "CustomerMasterKeySpec": "SYMMETRIC_DEFAULT",
    "KeySpec": "SYMMETRIC_DEFAULT",
    "EncryptionAlgorithms": [
      "SYMMETRIC_DEFAULT"
    ],
    "MultiRegion": false
  }
}
d
Hi @rahul1 Just wondering if any updates on this. Thanks!
149 Views