Class SslConfig (0.3.9)

SslConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)

SSL configuration.

Attributes

NameDescription
ssl_mode google.cloud.alloydb_v1.types.SslConfig.SslMode
Optional. SSL mode. Specifies client-server SSL/TLS connection behavior.
ca_source google.cloud.alloydb_v1.types.SslConfig.CaSource
Optional. Certificate Authority (CA) source. Only CA_SOURCE_MANAGED is supported currently, and is the default value.

Classes

CaSource

CaSource(value)

Certificate Authority (CA) source for SSL/TLS certificates.

Values: CA_SOURCE_UNSPECIFIED (0): Certificate Authority (CA) source not specified. Defaults to CA_SOURCE_MANAGED. CA_SOURCE_MANAGED (1): Certificate Authority (CA) managed by the AlloyDB Cluster.

SslMode

SslMode(value)

SSL mode options.

Values: SSL_MODE_UNSPECIFIED (0): SSL mode not specified. Defaults to ENCRYPTED_ONLY. SSL_MODE_ALLOW (1): SSL connections are optional. CA verification not enforced. SSL_MODE_REQUIRE (2): SSL connections are required. CA verification not enforced. Clients may use locally self-signed certificates (default psql client behavior). SSL_MODE_VERIFY_CA (3): SSL connections are required. CA verification enforced. Clients must have certificates signed by a Cluster CA, e.g. via GenerateClientCertificate. ALLOW_UNENCRYPTED_AND_ENCRYPTED (4): SSL connections are optional. CA verification not enforced. ENCRYPTED_ONLY (5): SSL connections are required. CA verification not enforced.