SslConfig(mapping=None, *, ignore_unknown_fields=False, **kwargs)SSL configuration.
Attributes | |
|---|---|
| Name | Description |
ssl_mode |
google.cloud.alloydb_v1beta.types.SslConfig.SslMode
Optional. SSL mode. Specifies client-server SSL/TLS connection behavior. |
ca_source |
google.cloud.alloydb_v1beta.types.SslConfig.CaSource
Optional. Certificate Authority (CA) source. Only CA_SOURCE_MANAGED is supported currently, and is the default value. |
Classes
CaSource
CaSource(value)Certificate Authority (CA) source for SSL/TLS certificates.
Values: CA_SOURCE_UNSPECIFIED (0): Certificate Authority (CA) source not specified. Defaults to CA_SOURCE_MANAGED. CA_SOURCE_MANAGED (1): Certificate Authority (CA) managed by the AlloyDB Cluster.
SslMode
SslMode(value)SSL mode options.
Values: SSL_MODE_UNSPECIFIED (0): SSL mode not specified. Defaults to ENCRYPTED_ONLY. SSL_MODE_ALLOW (1): SSL connections are optional. CA verification not enforced. SSL_MODE_REQUIRE (2): SSL connections are required. CA verification not enforced. Clients may use locally self-signed certificates (default psql client behavior). SSL_MODE_VERIFY_CA (3): SSL connections are required. CA verification enforced. Clients must have certificates signed by a Cluster CA, e.g. via GenerateClientCertificate. ALLOW_UNENCRYPTED_AND_ENCRYPTED (4): SSL connections are optional. CA verification not enforced. ENCRYPTED_ONLY (5): SSL connections are required. CA verification not enforced.