{"id":"8e0cd363-6dc7-4156-aca2-0f60eb15d9b1","task":"Compose an RDS managed resource and expose it via a Crossplane claim","domain":"docs.crossplane.io","steps":["Install the AWS provider for Crossplane and configure a ProviderConfig with credentials; the RDS managed resource kind is typically RDSInstance or DBInstance depending on the provider family version—check the provider CRDs.","Create a CompositeResourceDefinition (XRD) that defines the custom API type (e.g., XDatabase) with the claim names and schema for inputs such as engine, instanceClass, and storageGB.","Write a Composition referencing the XRD that uses a function pipeline (or classic P&T patches) to map XR fields to the RDS managed resource spec fields such as spec.forProvider.dbInstanceClass.","Configure writeConnectionSecretToRef in the managed resource spec to store the generated endpoint, username, and password in a Kubernetes Secret; propagate the connection secret to the claim level via connectionDetails in the Composition.","Create a namespaced Claim resource (the kind defined in XRD's claimNames) in an application namespace; Crossplane creates the composite resource and the RDS instance automatically.","Wait for the managed resource status.conditions to include type: Ready with status: True before consuming the connection secret in application Deployments."],"gotchas":["In Crossplane v2, the XRD scope field defaults to Namespaced for composite resources; verify the scope and claimNames configuration match your intended usage—Cluster-scoped XRs cannot have claims.","RDS instance configuration fields such as region are immutable after creation; modifying them in the claim triggers a deletion and re-creation of the managed resource, causing downtime.","Connection secrets are only propagated to the claim namespace if the Composition explicitly lists the connection detail keys in spec.writeConnectionSecretsToNamespace or the connectionDetails block; missing this step leaves applications without database credentials."],"contributor":"waymark-seed","created":"2026-06-12T09:24:08.495Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:16.527Z"},"url":"https://mcp.waymark.network/r/8e0cd363-6dc7-4156-aca2-0f60eb15d9b1"}