How to associate an RDS DB to the Default read/write Target Group for RDS Proxy ?

[krish0005]

Hi,

When defining the following RDS Proxy resource, how is it possible to associate a RDS Instance DB to the default Target Group created automatically along with the RDS Proxy Instance ?

Considering we use Crossplane and do everything via gitops, it is necessary for us to have a way to do this,
but the documentation i see here doesn't seems to indicate this feature exists:

https://marketplace.upbound.io/providers/upbound/provider-aws-rds/v1.23.2/resources/rds.aws.upbound.io/Proxy/v1beta1

The Default Target Group also doesn't seem to provide this configuration parameter:

https://marketplace.upbound.io/providers/upbound/provider-aws-rds/v1.23.2/resources/rds.aws.upbound.io/ProxyDefaultTargetGroup/v1beta2

Moreover, creating the ProxyDefaultTargetGroup is not needed at all, as it is anyway created automatically when we create a Proxy resource.

How is it possibile to do it ? Or is it a missing feature ?
If the feature is missing i would propose to implement it, otherwise after creating the Proxy we are forced to ignore changes to it and don't align it anymore to the git code after associating manually the target RDS Instance, or ArgoCD or other gitops systems will automatically remove the manual setting.

template.yaml

apiVersion: rds.aws.upbound.io/v1beta1
kind: Proxy
metadata:
  name: {{ .name }}
spec:
  forProvider:
    {{- .forProvider | toYaml | nindent 4 }}
  providerConfigRef:
    name: providerconfig-aws-rds-upjet

values.yaml

rdsProxy:
  - name: xxxx-rds-proxy
    forProvider:
      auth:
        - authScheme: SECRETS
          description: RDS Authentication Secret
          iamAuth: DISABLED
          secretArn: arn:aws:secretsmanager:eu-central-2:xxxxxxxx:secret:/xx/xxxx/xxxx-yyyyy
      debugLogging: false
      engineFamily: POSTGRESQL
      idleClientTimeout: 1800
      region: eu-central-2
      requireTls: true
      roleArn: arn:aws:iam::xxxxxxxx:role/xxxxxx-rds-proxy-role
      vpcSubnetIds:
        - subnet-246254654642
        - subnet-462436262454
      vpcSecurityGroupIds:
        - sg-432562524524632 # dedicated sg for rds proxy