chore: update the certificate file to connect to RDS (#374)

* chore: update the certificate file to connect to RDS

* fix: missing slash

* fix: sslcert and sslmode based on prisma docs

* fix: ensure api lambda functions have rds.pem file

* fix: ensure rds connection string points to the correct ssl cert

* fix: unintended change

.github/CODEOWNERS

@@ -2,7 +2,7 @@
 /.github/  @usdigitalresponse/grants-admins
 
 # Require admin approval when Postgres root CA bundle is modified
-/api/db/rds-combined-ca-bundle.pem @usdigitalresponse/grants-admins
+/api/db/rds-global-bundle.pem @usdigitalresponse/grants-admins
 
 # Require admin approval when GPG keys are modified
 aws-public-key.gpg @usdigitalresponse/grants-admins

.github/workflows/build.yml

@@ -447,6 +447,11 @@ jobs:
           CI: 1
       - name: Zip the built functions
         run: yarn zip-it-and-ship-it $BUILD_OUTPUT_PATH/functions $ARTIFACTS_PATH
+      - name: Add RDS CA bundle to zipped Lambda artifacts
+        run: |
+          for $zipfile in $ARTIFACTS_PATH/*.zip; do
+            zip -ju $zipfile api/db/rds-global-bundle.pem
+          done;
       - name: Compute build artifact checksums
         id: checksums
         run: |