Connect to a Google Cloud SQL Instance

This section shows you how to connect Collibra DQ to a Google Cloud (GCP) SQL instance with SSL enabled.

Steps

  1. Create a new client certificate from CloudSQL.

  2. Download the client-cert.pem, client-key.pem, server-ca.pem files from the Google Cloud Console to a deployment directory such as /opt/owl/certs/.

  3. In that directory, run the following command:

    Copy 
    openssl pkcs8 -topk8 -inform PEM -outform DER -in client-key.pem -out client-key.pk8  -nocrypt

    Note This command should not require a password.

  4. In owl.properties and owl-env.sh, change your JDBC URL to the following:

    Copy 
    jdbc:postgresql://$HOST:5432/postgres?sslcert=/opt/owl/certs/client-cert.pem&sslkey=/opt/owl/certs/client-key.pk8&sslrootcert=/opt/owl/certs/server-ca.pem