Maintained with ☕️ by
IcePanel logo

You can now configure server certificate authority (CA) mode when you create a Cloud SQL instance

Share

Services

## Feature You can now configure server certificate authority (CA) mode when you create a Cloud SQL instance. With server CA mode, you have two options: * **Per-instance CA**: this is the default configuration. With this option, an internal CA dedicated to each Cloud SQL instance signs the server certificate for that instance. * **Shared CA**: with this option, the Cloud SQL instance uses a CA hierarchy consisting of a root CA and subordinate server CAs managed by Cloud SQL and hosted on Google Cloud Certificate Authority Service (CA Service). The subordinate server CAs in a region sign the server certificates and are shared across instances in the region. This option can be used only with MySQL 8.0.30 and later. For more information about each option, see [Certificate authority (CA) hierarchies](https://cloud.google.com/sql/docs/mysql/authorize-ssl#certificate%5Fauthority%5Fca%5Fhierarchies). This feature is in [Preview](https://cloud.google.com/products#product-launch-stages).