Add sqlserver private ip ssl app engine connect.

jsimonweb · jsimonweb · commit 05d9bcb0041f · 2022-09-20T10:45:02.000-07:00
diff --git a/cloud-sql/sql-server/sqlalchemy/connect_connector.py b/cloud-sql/sql-server/sqlalchemy/connect_connector.py
@@ -35,6 +35,12 @@ def connect_with_connector() -> sqlalchemy.engine.base.Engine:
     db_name = os.environ["DB_NAME"]  # e.g. 'my-database'
 
     ip_type = IPTypes.PRIVATE if os.environ.get("PRIVATE_IP") else IPTypes.PUBLIC
+    # [START_EXCLUDE]
+    if 'DB_ROOT_CERT' in os.environ:
+        db_root_cert = os.environ["DB_ROOT_CERT"] # e.g. 'certs/server-ca.pem'
+    else:
+        db_root_cert = None
+    # [END_EXCLUDE]
 
     connector = Connector(ip_type)
 
@@ -45,6 +51,9 @@ def getconn() -> pytds.Connection:
             user=db_user,
             password=db_pass,
             db=db_name,
+            # [START_EXCLUDE]
+            cafile=db_root_cert,
+            # [END_EXCLUDE]
         )
         return conn
 
