Retrieve SSL Cert Bundle for Liberator ECS task (#2020)

* retrieve cert bundle

* remove ssl_mode env var handling

* log messages

Author: timburke-hackit

docker/sql-to-parquet/entrypoint.sh

@@ -19,23 +19,18 @@ echo "Snapshot Id - $SNAPSHOT_ID"
 FILENAME="liberator_dump_${DATE}"
 DBNAME="liberator"
 
-MYSQL_CONN_PARAMS="--user=${MYSQL_USER} --password=${MYSQL_PASS} --host=${MYSQL_HOST}"
+echo "Retrieving pem file..."
+wget -O /tmp/rds-combined-ca-bundle.pem https://truststore.pki.rds.amazonaws.com/eu-west-2/eu-west-2-bundle.pem
 
-SSL_MODE=${MYSQL_SSL_MODE:-""}  
-OTHER_FLAGS=${MYSQL_OTHER_FLAGS:-""}  
+MYSQL_CONN_PARAMS="--user=${MYSQL_USER} --password=${MYSQL_PASS} --host=${MYSQL_HOST} --ssl-ca=/tmp/rds-combined-ca-bundle.pem"
 
-if [ -n "$SSL_MODE" ]; then
-  MYSQL_CONN_PARAMS="$MYSQL_CONN_PARAMS --ssl-mode=$SSL_MODE"
-  echo "SSL Mode set to $SSL_MODE"
-fi
+OTHER_FLAGS=${MYSQL_OTHER_FLAGS:-""}  
 
 if [ -n "$OTHER_FLAGS" ]; then
   MYSQL_CONN_PARAMS="$MYSQL_CONN_PARAMS $OTHER_FLAGS"
   echo "Additional MySQL flags: $OTHER_FLAGS"
 fi
 
-echo "MYSQL connection params: $MYSQL_CONN_PARAMS"
-
 echo "Deleting old snapshots in database..."
 python3 delete_db_snapshots_in_db.py