This topic describes how to use Terraform to disable the automatic primary/secondary switchover feature for an ApsaraDB RDS for PostgreSQL instance that runs RDS High-availability Edition for a short period of time.
Note
You can run the sample code in this topic with a few clicks. For more information, visit Terraform Explorer.
Prerequisites
An RDS instance is created. For more information, see Create an RDS instance.
The RDS instance is in the Running state. You can use one of the following methods to check whether the RDS instance is in the Running state:
Check the value of the status parameter by following the instructions provided in Query instance details. If the value is Running, the RDS instance is in the Running state.
Log on to the ApsaraDB RDS console, switch to the required region, find the RDS instance, and then check the instance status.
An Alibaba Cloud account has all permissions on resources within the account. If an Alibaba Cloud account is leaked, the resources are exposed to major risks. We recommend that you use a Resource Access Management (RAM) user and create an AccessKey pair for the RAM user. For more information, see Create a RAM user and Create an AccessKey pair.
You must use RAM to manage access permissions on cloud resources in an efficient manner. This helps meet the requirements for multi-user collaboration and allows you to grant permissions to users based on the principle of least privilege (PoLP) to prevent security vulnerabilities caused by excessive permissions. For more information, see Grant permissions to RAM users.
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVpcAttribute",
"vpc:DescribeRouteTableList",
"vpc:DescribeVSwitchAttributes",
"vpc:DeleteVpc",
"vpc:DeleteVSwitch",
"vpc:CreateVpc",
"vpc:CreateVSwitch"
],
"Resource": "*"
},
{
"Action": "rds:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "dbs:*",
"Resource": "acs:rds:*:*:*",
"Effect": "Allow"
},
{
"Action": "hdm:*",
"Resource": "acs:rds:*:*:*",
"Effect": "Allow"
},
{
"Action": "dms:LoginDatabase",
"Resource": "acs:rds:*:*:*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Condition": {
"StringEquals": {
"ram:ServiceName": [
"backupencryption.rds.aliyuncs.com"
]
}
}
},
{
"Effect": "Allow",
"Action": "bss:ModifyAgreementRecord",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"bss:DescribeOrderList",
"bss:DescribeOrderDetail",
"bss:PayOrder",
"bss:CancelOrder"
],
"Resource": "*"
}
]
}
Prepare the Terraform environment. You can use one of the following methods to use Terraform:
Use Terraform in Terraform Explorer: Alibaba Cloud provides Terraform Explorer, an online runtime environment for Terraform. You can use Terraform after you log on to Terraform Explorer without the need to install Terraform. For more information, see Use Terraform in Terraform Explorer. This method is suitable for scenarios in which you want to use and debug Terraform in a fast and convenient manner at no additional cost.
Use Terraform in Cloud Shell: Terraform is preinstalled in Cloud Shell and identity credentials are configured. You can directly run Terraform commands in Cloud Shell. For more information, see Use Terraform in Cloud Shell. This method is suitable for scenarios in which you want to use and debug Terraform in a fast and convenient manner at low cost.
Install and configure Terraform on your on-premises machine: This method is suitable for scenarios in which network conditions are poor or a custom development environment is used. For more information, see Install and configure Terraform in the local PC.
Resources
Note
You are charged for specific resources. If you no longer require the resources, you must release or unsubscribe from the resources at the earliest opportunity.
Temporarily disable the automatic primary/secondary switchover feature
By default, the automatic primary/secondary switchover feature is enabled for an RDS instance that runs RDS High-availability Edition. You can use Terraform to temporarily disable the feature.
Create a working directory and a configuration file named main.tf in the directory. Copy the following code to the main.tf configuration file:
Create the required resources.
variable "region" {
default = "cn-heyuan"
}
provider "alicloud" {
region = var.region
}
variable "zone_id" {
default = "cn-heyuan-b"
}
variable "instance_type" {
default = "pg.n2.2c.2m"
}
resource "alicloud_vpc" "main" {
vpc_name = "alicloud"
cidr_block = "172.16.0.0/16"
}
resource "alicloud_vswitch" "main" {
vpc_id = alicloud_vpc.main.id
cidr_block = "172.16.192.0/20"
zone_id = var.zone_id
}
resource "alicloud_db_instance" "instance" {
engine = "PostgreSQL"
engine_version = "13.0"
instance_type = var.instance_type
instance_storage = "30"
instance_charge_type = "Postpaid"
vswitch_id = alicloud_vswitch.main.id
}
In the main.tf file, add the resource "time_static" "example" {}
configuration item and add the ha_config
and manual_ha_time
fields to the resource "alicloud_db_instance" "instance" {}
configuration item. Then, configure the fields based on the following code snippet:
...
resource "time_static" "example" {}
resource "alicloud_db_instance" "instance" {
ha_config = "Manual"
manual_ha_time = formatdate("YYYY-MM-DD'T'hh:mm:ss'Z'", timeadd(time_static.example.rfc3339, "1h"))
}
Note
The display time in the ApsaraDB RDS console is in UTC+8. If you want to use Terraform to configure a point in time, you must configure the point in time in UTC. In this example, the point in time is set to 09:00
, which specifies 17:00
(UTC+8).
The value of the manual_ha_time field must be later than the current time.
Run the following command to initialize the runtime environment for Terraform:
If the following information is returned, Terraform is initialized.
Initializing the backend...
Initializing provider plugins...
- Checking for available provider plugins...
- Downloading plugin for provider "alicloud" (hashicorp/alicloud) 1.90.1...
...
You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.
If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
Create an execution plan and preview the changes.
Run the following command to create the resources:
During the execution, enter yes
as prompted and press the Enter key. Wait until the command is successfully executed. If the following information appears, the operation is successful:
alicloud_db_instance.instance: Modifying... [id=pgm-****]
alicloud_db_instance.instance: Still modifying... [id=pgm-****, 10s elapsed]
...
alicloud_db_instance.instance: Still modifying... [id=pgm-****, 3m0s elapsed]
alicloud_db_instance.instance: Modifications complete after 3m4s [id=pgm-****]
Apply complete! Resources: 0 added, 1 changed, 0 destroyed.
Verify the result.
Run the terraform show command
Log on to the ApsaraDB RDS console
Run the following command to view the status of the automatic primary/secondary switchover feature:
# alicloud_db_instance.instance:
resource "alicloud_db_instance" "instance" {
client_ca_enabled = 0
client_crl_enabled = 0
connection_string = "pgm-****.pg.rds.aliyuncs.com"
connection_string_prefix = "pgm-****"
db_instance_storage_type = "cloud_essd"
db_time_zone = "Asia/Shanghai"
deletion_protection = false
engine = "PostgreSQL"
engine_version = "13.0"
force_restart = false
ha_config = "Manual"
id = "pgm-****"
instance_charge_type = "Postpaid"
instance_name = "terraformtest"
instance_storage = 50
instance_type = "pg.n2.2c.2m"
maintain_time = "05:00Z-06:00Z"
manual_ha_time = "2024-11-30T09:00:00Z"
monitoring_period = 300
period = 0
port = "5432"
private_ip_address = "192.168.XX.XX"
resource_group_id = "rg-****"
security_group_ids = []
security_ip_mode = "normal"
security_ips = [
"127.0.0.1",
]
sql_collector_config_value = 30
sql_collector_status = "Disabled"
storage_auto_scale = "Enable"
storage_threshold = 30
storage_upper_bound = 100
target_minor_version = "rds_postgres_1300_20220830"
tcp_connection_type = "SHORT"
vpc_id = "vpc-****"
vswitch_id = "vsw-****"
zone_id = "cn-heyuan-b"
pg_hba_conf {
address = "127.0.0.1"
database = "all"
method = "md5"
priority_id = 1
type = "host"
user = "all"
}
}
Log on to the ApsaraDB RDS console to view the status of the automatic primary/secondary switchover feature.
Clear resources
If you no longer require the preceding resources that are created or managed by using Terraform, run the following command to release the resources. For more information about the terraform destroy
command, see Common commands.
Complete sample code
Note
You can run the sample code in this topic with a few clicks. For more information, visit Terraform Explorer.
Sample code
variable "region" {
default = "cn-heyuan"
}
variable "zone_id" {
default = "cn-heyuan-b"
}
variable "instance_type" {
default = "pg.n2.2c.2m"
}
provider "alicloud" {
region = var.region
}
resource "alicloud_vpc" "main" {
vpc_name = "alicloud"
cidr_block = "172.16.0.0/16"
}
resource "alicloud_vswitch" "main" {
vpc_id = alicloud_vpc.main.id
cidr_block = "172.16.192.0/20"
zone_id = var.zone_id
}
resource "time_static" "example" {}
resource "alicloud_db_instance" "instance" {
engine = "PostgreSQL"
engine_version = "13.0"
instance_type = var.instance_type
instance_storage = "30"
instance_charge_type = "Postpaid"
vswitch_id = alicloud_vswitch.main.id
ha_config = "Manual"
manual_ha_time = formatdate("YYYY-MM-DD'T'hh:mm:ss'Z'", timeadd(time_static.example.rfc3339, "1h"))
}
If you want to view more complete examples, visit the directory of the corresponding service on the More Complete Examples page.