AlloyDB introduces new output-only fields to enhance connectivity and security. The Cluster resource now includes certificateAuthorityInfo, which exposes a new CertificateAuthorityInfo schema containing the rootCaCert. This PEM-encoded root CA certificate is crucial for establishing secure PostgreSQL client connections using sslmode=verify-full or sslmode=verify-ca. Similarly, the Instance resource now provides networkInfo, which includes a new InstanceNetworkInfo schema with the publicDnsName for public connectivity. Additionally, you can now configure public DNS for instances via the new publicDnsEnabled boolean field within InstanceNetworkConfig.
Breaking Change Alert: Several properties have been transitioned to read-only status. Specifically, attempts to set rootCaCert within CertificateAuthorityInfo, the entire certificateAuthorityInfo object within Cluster, the networkInfo object within Instance, and publicDnsName within InstanceNetworkInfo will now result in errors. These fields are now strictly output-only, providing information but not allowing configuration. Developers must update their API calls to remove any attempts to modify these properties.
