feat: Customer Certificate Authority support

GoogleCloudPlatform · Dec 17, 2024 · 5606daa · 5606daa
1 parent deab18c
commit 5606daa
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/internal/cloudsql/instance.go b/internal/cloudsql/instance.go
@@ -241,7 +241,8 @@ func (c ConnectionInfo) TLSConfig() *tls.Config {
 	for _, caCert := range c.ServerCACert {
 		pool.AddCert(caCert)
 	}
-	if c.ServerCAMode == "GOOGLE_MANAGED_CAS_CA" {
+	if c.ServerCAMode == "GOOGLE_MANAGED_CAS_CA" ||
+		c.ServerCAMode == "CUSTOMER_MANAGED_CAS_CA" {
 		// For CAS instances, we can rely on the DNS name to verify the server identity.
 		return &tls.Config{
 			ServerName:   c.DNSName,