From 858d8ad35a45eb6b70ab6faef176711d061d42bf Mon Sep 17 00:00:00 2001
From: Tom Alexander <tom@fizz.buzz>
Date: Sun, 18 Jul 2021 16:37:26 -0400
Subject: [PATCH] Require ssl for cloudsql.

---
 terraform/modules/cloudsql/cloudsql.tf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/terraform/modules/cloudsql/cloudsql.tf b/terraform/modules/cloudsql/cloudsql.tf
index b9c9520..b6d2546 100644
--- a/terraform/modules/cloudsql/cloudsql.tf
+++ b/terraform/modules/cloudsql/cloudsql.tf
@@ -25,6 +25,11 @@ variable "private_network_id" {
   type        = string
 }
 
+output "connection_name" {
+  description = "The connection string for connecting to the cloudsql instance (for example, through cloudsql proxy)."
+  value       = google_sql_database_instance.instance.connection_name
+}
+
 resource "random_id" "cloudsql" {
   byte_length = 4
 }
@@ -41,6 +46,7 @@ resource "google_sql_database_instance" "instance" {
     ip_configuration {
       ipv4_enabled    = false
       private_network = var.private_network_id
+      require_ssl     = true
     }
   }