SslMode(value)The SSL options for database connections.
When this value is used, the legacy `require_ssl` flag
must be false or cleared to avoid a conflict between the
values of the two flags.
ENCRYPTED_ONLY (2):
Only allow connections encrypted with SSL/TLS. For SSL
connections to MySQL and PostgreSQL, the client certificate
isn't verified.
When this value is used, the legacy `require_ssl` flag
must be false or cleared to avoid a conflict between the
values of the two flags.
TRUSTED_CLIENT_CERTIFICATE_REQUIRED (3):
Only allow connections encrypted with SSL/TLS and with valid
client certificates.
When this value is used, the legacy `require_ssl` flag
must be true or cleared to avoid the conflict between values
of two flags. PostgreSQL clients or users that connect using
IAM database authentication must use either the `Cloud SQL
Auth
Proxy <https://cloud.google.com/sql/docs/postgres/connect-auth-proxy>`__
or `Cloud SQL
Connectors <https://cloud.google.com/sql/docs/postgres/connect-connectors>`__
to enforce client identity verification.
Only applicable to MySQL and PostgreSQL. Not applicable to
SQL Server.
Enums |
|
|---|---|
| Name | Description |
SSL_MODE_UNSPECIFIED |
The SSL mode is unknown. |
ALLOW_UNENCRYPTED_AND_ENCRYPTED |
Allow non-SSL/non-TLS and SSL/TLS connections. For SSL connections to MySQL and PostgreSQL, the client certificate isn't verified. |