SslConfig

SSL configuration.

JSON representation
{ "sslMode": enum (SslMode), "caSource": enum (CaSource) }

Fields
sslMode	enum (SslMode) Optional. SSL mode. Specifies client-server SSL/TLS connection behavior.
caSource	enum (CaSource) Optional. Certificate Authority (CA) source. Only CA_SOURCE_MANAGED is supported currently, and is the default value.

SslMode

SSL mode options.

Enums
SSL_MODE_UNSPECIFIED	SSL mode not specified. Defaults to ENCRYPTED_ONLY.
SSL_MODE_ALLOW	SSL connections are optional. CA verification not enforced. This item is deprecated!
SSL_MODE_REQUIRE	SSL connections are required. CA verification not enforced. Clients may use locally self-signed certificates (default psql client behavior). This item is deprecated!
SSL_MODE_VERIFY_CA	SSL connections are required. CA verification enforced. Clients must have certificates signed by a Cluster CA, e.g. via GenerateClientCertificate. This item is deprecated!
ALLOW_UNENCRYPTED_AND_ENCRYPTED	SSL connections are optional. CA verification not enforced.
ENCRYPTED_ONLY	SSL connections are required. CA verification not enforced.

CaSource

Certificate Authority (CA) source for SSL/TLS certificates.

Enums
CA_SOURCE_UNSPECIFIED	Certificate Authority (CA) source not specified. Defaults to CA_SOURCE_MANAGED.
CA_SOURCE_MANAGED	Certificate Authority (CA) managed by the AlloyDB Cluster.