pulumi-gcp 8.26.0a1744267117__py3-none-any.whl → 8.27.0__py3-none-any.whl

pulumi_gcp/databasemigrationservice/_inputs.py

@@ -1370,9 +1370,9 @@ class ConnectionProfileMysqlArgs:
 
 if not MYPY:
     class ConnectionProfileMysqlSslArgsDict(TypedDict):
-        ca_certificate: pulumi.Input[builtins.str]
+        ca_certificate: NotRequired[pulumi.Input[builtins.str]]
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """
@@ -1399,12 +1399,12 @@ elif False:
 @pulumi.input_type
 class ConnectionProfileMysqlSslArgs:
     def __init__(__self__, *,
-                 ca_certificate: pulumi.Input[builtins.str],
+                 ca_certificate: Optional[pulumi.Input[builtins.str]] = None,
                  client_certificate: Optional[pulumi.Input[builtins.str]] = None,
                  client_key: Optional[pulumi.Input[builtins.str]] = None,
                  type: Optional[pulumi.Input[builtins.str]] = None):
         """
-        :param pulumi.Input[builtins.str] ca_certificate: Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        :param pulumi.Input[builtins.str] ca_certificate: Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
                The replica will use this certificate to verify it's connecting to the right host.
                **Note**: This property is sensitive and will not be displayed in the plan.
         :param pulumi.Input[builtins.str] client_certificate: Input only. The x509 PEM-encoded certificate that will be used by the replica to authenticate against the source database server.
@@ -1416,7 +1416,8 @@ class ConnectionProfileMysqlSslArgs:
         :param pulumi.Input[builtins.str] type: (Output)
                The current connection profile state.
         """
-        pulumi.set(__self__, "ca_certificate", ca_certificate)
+        if ca_certificate is not None:
+            pulumi.set(__self__, "ca_certificate", ca_certificate)
         if client_certificate is not None:
             pulumi.set(__self__, "client_certificate", client_certificate)
         if client_key is not None:
@@ -1426,16 +1427,16 @@ class ConnectionProfileMysqlSslArgs:
 
     @property
     @pulumi.getter(name="caCertificate")
-    def ca_certificate(self) -> pulumi.Input[builtins.str]:
+    def ca_certificate(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """
         return pulumi.get(self, "ca_certificate")
 
     @ca_certificate.setter
-    def ca_certificate(self, value: pulumi.Input[builtins.str]):
+    def ca_certificate(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "ca_certificate", value)
 
     @property
@@ -1856,9 +1857,9 @@ class ConnectionProfileOraclePrivateConnectivityArgs:
 
 if not MYPY:
     class ConnectionProfileOracleSslArgsDict(TypedDict):
-        ca_certificate: pulumi.Input[builtins.str]
+        ca_certificate: NotRequired[pulumi.Input[builtins.str]]
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """
@@ -1885,12 +1886,12 @@ elif False:
 @pulumi.input_type
 class ConnectionProfileOracleSslArgs:
     def __init__(__self__, *,
-                 ca_certificate: pulumi.Input[builtins.str],
+                 ca_certificate: Optional[pulumi.Input[builtins.str]] = None,
                  client_certificate: Optional[pulumi.Input[builtins.str]] = None,
                  client_key: Optional[pulumi.Input[builtins.str]] = None,
                  type: Optional[pulumi.Input[builtins.str]] = None):
         """
-        :param pulumi.Input[builtins.str] ca_certificate: Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        :param pulumi.Input[builtins.str] ca_certificate: Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
                The replica will use this certificate to verify it's connecting to the right host.
                **Note**: This property is sensitive and will not be displayed in the plan.
         :param pulumi.Input[builtins.str] client_certificate: Input only. The x509 PEM-encoded certificate that will be used by the replica to authenticate against the source database server.
@@ -1902,7 +1903,8 @@ class ConnectionProfileOracleSslArgs:
         :param pulumi.Input[builtins.str] type: (Output)
                The current connection profile state.
         """
-        pulumi.set(__self__, "ca_certificate", ca_certificate)
+        if ca_certificate is not None:
+            pulumi.set(__self__, "ca_certificate", ca_certificate)
         if client_certificate is not None:
             pulumi.set(__self__, "client_certificate", client_certificate)
         if client_key is not None:
@@ -1912,16 +1914,16 @@ class ConnectionProfileOracleSslArgs:
 
     @property
     @pulumi.getter(name="caCertificate")
-    def ca_certificate(self) -> pulumi.Input[builtins.str]:
+    def ca_certificate(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """
         return pulumi.get(self, "ca_certificate")
 
     @ca_certificate.setter
-    def ca_certificate(self, value: pulumi.Input[builtins.str]):
+    def ca_certificate(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "ca_certificate", value)
 
     @property
@@ -2187,9 +2189,9 @@ class ConnectionProfilePostgresqlArgs:
 
 if not MYPY:
     class ConnectionProfilePostgresqlSslArgsDict(TypedDict):
-        ca_certificate: pulumi.Input[builtins.str]
+        ca_certificate: NotRequired[pulumi.Input[builtins.str]]
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """
@@ -2216,12 +2218,12 @@ elif False:
 @pulumi.input_type
 class ConnectionProfilePostgresqlSslArgs:
     def __init__(__self__, *,
-                 ca_certificate: pulumi.Input[builtins.str],
+                 ca_certificate: Optional[pulumi.Input[builtins.str]] = None,
                  client_certificate: Optional[pulumi.Input[builtins.str]] = None,
                  client_key: Optional[pulumi.Input[builtins.str]] = None,
                  type: Optional[pulumi.Input[builtins.str]] = None):
         """
-        :param pulumi.Input[builtins.str] ca_certificate: Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        :param pulumi.Input[builtins.str] ca_certificate: Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
                The replica will use this certificate to verify it's connecting to the right host.
                **Note**: This property is sensitive and will not be displayed in the plan.
         :param pulumi.Input[builtins.str] client_certificate: Input only. The x509 PEM-encoded certificate that will be used by the replica to authenticate against the source database server.
@@ -2233,7 +2235,8 @@ class ConnectionProfilePostgresqlSslArgs:
         :param pulumi.Input[builtins.str] type: (Output)
                The current connection profile state.
         """
-        pulumi.set(__self__, "ca_certificate", ca_certificate)
+        if ca_certificate is not None:
+            pulumi.set(__self__, "ca_certificate", ca_certificate)
         if client_certificate is not None:
             pulumi.set(__self__, "client_certificate", client_certificate)
         if client_key is not None:
@@ -2243,16 +2246,16 @@ class ConnectionProfilePostgresqlSslArgs:
 
     @property
     @pulumi.getter(name="caCertificate")
-    def ca_certificate(self) -> pulumi.Input[builtins.str]:
+    def ca_certificate(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """
         return pulumi.get(self, "ca_certificate")
 
     @ca_certificate.setter
-    def ca_certificate(self, value: pulumi.Input[builtins.str]):
+    def ca_certificate(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "ca_certificate", value)
 
     @property

pulumi_gcp/databasemigrationservice/connection_profile.py

@@ -585,6 +585,7 @@ class ConnectionProfile(pulumi.CustomResource):
                     "client_key": sql_client_cert.private_key,
                     "client_certificate": sql_client_cert.cert,
                     "ca_certificate": sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
                 },
                 "cloud_sql_id": "my-database",
             },
@@ -658,6 +659,89 @@ class ConnectionProfile(pulumi.CustomResource):
                     "client_key": sql_client_cert.private_key,
                     "client_certificate": sql_client_cert.cert,
                     "ca_certificate": sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
+                },
+                "cloud_sql_id": "my-database",
+            },
+            opts = pulumi.ResourceOptions(depends_on=[sqldb_user]))
+        ```
+        ### Database Migration Service Connection Profile Postgres No Ssl
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        postgresqldb = gcp.sql.DatabaseInstance("postgresqldb",
+            name="my-database",
+            database_version="POSTGRES_12",
+            settings={
+                "tier": "db-custom-2-13312",
+            },
+            deletion_protection=False)
+        sql_client_cert = gcp.sql.SslCert("sql_client_cert",
+            common_name="my-cert",
+            instance=postgresqldb.name,
+            opts = pulumi.ResourceOptions(depends_on=[postgresqldb]))
+        sqldb_user = gcp.sql.User("sqldb_user",
+            name="my-username",
+            instance=postgresqldb.name,
+            password="my-password",
+            opts = pulumi.ResourceOptions(depends_on=[sql_client_cert]))
+        postgresprofile = gcp.databasemigrationservice.ConnectionProfile("postgresprofile",
+            location="us-central1",
+            connection_profile_id="my-profileid",
+            display_name="my-profileid_display",
+            labels={
+                "foo": "bar",
+            },
+            postgresql={
+                "host": postgresqldb.ip_addresses[0].ip_address,
+                "port": 5432,
+                "username": sqldb_user.name,
+                "password": sqldb_user.password,
+                "ssl": {
+                    "type": "NONE",
+                },
+                "cloud_sql_id": "my-database",
+            },
+            opts = pulumi.ResourceOptions(depends_on=[sqldb_user]))
+        ```
+        ### Database Migration Service Connection Profile Postgres Required Ssl
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        postgresqldb = gcp.sql.DatabaseInstance("postgresqldb",
+            name="my-database",
+            database_version="POSTGRES_12",
+            settings={
+                "tier": "db-custom-2-13312",
+            },
+            deletion_protection=False)
+        sql_client_cert = gcp.sql.SslCert("sql_client_cert",
+            common_name="my-cert",
+            instance=postgresqldb.name,
+            opts = pulumi.ResourceOptions(depends_on=[postgresqldb]))
+        sqldb_user = gcp.sql.User("sqldb_user",
+            name="my-username",
+            instance=postgresqldb.name,
+            password="my-password",
+            opts = pulumi.ResourceOptions(depends_on=[sql_client_cert]))
+        postgresprofile = gcp.databasemigrationservice.ConnectionProfile("postgresprofile",
+            location="us-central1",
+            connection_profile_id="my-profileid",
+            display_name="my-profileid_display",
+            labels={
+                "foo": "bar",
+            },
+            postgresql={
+                "host": postgresqldb.ip_addresses[0].ip_address,
+                "port": 5432,
+                "username": sqldb_user.name,
+                "password": sqldb_user.password,
+                "ssl": {
+                    "type": "REQUIRED",
                 },
                 "cloud_sql_id": "my-database",
             },
@@ -945,6 +1029,7 @@ class ConnectionProfile(pulumi.CustomResource):
                     "client_key": sql_client_cert.private_key,
                     "client_certificate": sql_client_cert.cert,
                     "ca_certificate": sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
                 },
                 "cloud_sql_id": "my-database",
             },
@@ -1018,6 +1103,89 @@ class ConnectionProfile(pulumi.CustomResource):
                     "client_key": sql_client_cert.private_key,
                     "client_certificate": sql_client_cert.cert,
                     "ca_certificate": sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
+                },
+                "cloud_sql_id": "my-database",
+            },
+            opts = pulumi.ResourceOptions(depends_on=[sqldb_user]))
+        ```
+        ### Database Migration Service Connection Profile Postgres No Ssl
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        postgresqldb = gcp.sql.DatabaseInstance("postgresqldb",
+            name="my-database",
+            database_version="POSTGRES_12",
+            settings={
+                "tier": "db-custom-2-13312",
+            },
+            deletion_protection=False)
+        sql_client_cert = gcp.sql.SslCert("sql_client_cert",
+            common_name="my-cert",
+            instance=postgresqldb.name,
+            opts = pulumi.ResourceOptions(depends_on=[postgresqldb]))
+        sqldb_user = gcp.sql.User("sqldb_user",
+            name="my-username",
+            instance=postgresqldb.name,
+            password="my-password",
+            opts = pulumi.ResourceOptions(depends_on=[sql_client_cert]))
+        postgresprofile = gcp.databasemigrationservice.ConnectionProfile("postgresprofile",
+            location="us-central1",
+            connection_profile_id="my-profileid",
+            display_name="my-profileid_display",
+            labels={
+                "foo": "bar",
+            },
+            postgresql={
+                "host": postgresqldb.ip_addresses[0].ip_address,
+                "port": 5432,
+                "username": sqldb_user.name,
+                "password": sqldb_user.password,
+                "ssl": {
+                    "type": "NONE",
+                },
+                "cloud_sql_id": "my-database",
+            },
+            opts = pulumi.ResourceOptions(depends_on=[sqldb_user]))
+        ```
+        ### Database Migration Service Connection Profile Postgres Required Ssl
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        postgresqldb = gcp.sql.DatabaseInstance("postgresqldb",
+            name="my-database",
+            database_version="POSTGRES_12",
+            settings={
+                "tier": "db-custom-2-13312",
+            },
+            deletion_protection=False)
+        sql_client_cert = gcp.sql.SslCert("sql_client_cert",
+            common_name="my-cert",
+            instance=postgresqldb.name,
+            opts = pulumi.ResourceOptions(depends_on=[postgresqldb]))
+        sqldb_user = gcp.sql.User("sqldb_user",
+            name="my-username",
+            instance=postgresqldb.name,
+            password="my-password",
+            opts = pulumi.ResourceOptions(depends_on=[sql_client_cert]))
+        postgresprofile = gcp.databasemigrationservice.ConnectionProfile("postgresprofile",
+            location="us-central1",
+            connection_profile_id="my-profileid",
+            display_name="my-profileid_display",
+            labels={
+                "foo": "bar",
+            },
+            postgresql={
+                "host": postgresqldb.ip_addresses[0].ip_address,
+                "port": 5432,
+                "username": sqldb_user.name,
+                "password": sqldb_user.password,
+                "ssl": {
+                    "type": "REQUIRED",
                 },
                 "cloud_sql_id": "my-database",
             },

pulumi_gcp/databasemigrationservice/migration_job.py

@@ -775,6 +775,7 @@ class MigrationJob(pulumi.CustomResource):
                     "client_key": source_sql_client_cert.private_key,
                     "client_certificate": source_sql_client_cert.cert,
                     "ca_certificate": source_sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
                 },
                 "cloud_sql_id": "source-csql",
             },
@@ -863,6 +864,7 @@ class MigrationJob(pulumi.CustomResource):
                     "client_key": source_sql_client_cert.private_key,
                     "client_certificate": source_sql_client_cert.cert,
                     "ca_certificate": source_sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
                 },
                 "cloud_sql_id": "source-csql",
             },
@@ -938,6 +940,7 @@ class MigrationJob(pulumi.CustomResource):
                     "client_key": source_sql_client_cert.private_key,
                     "client_certificate": source_sql_client_cert.cert,
                     "ca_certificate": source_sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
                 },
                 "cloud_sql_id": "source-csql",
             },
@@ -1114,6 +1117,7 @@ class MigrationJob(pulumi.CustomResource):
                     "client_key": source_sql_client_cert.private_key,
                     "client_certificate": source_sql_client_cert.cert,
                     "ca_certificate": source_sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
                 },
                 "cloud_sql_id": "source-csql",
             },
@@ -1202,6 +1206,7 @@ class MigrationJob(pulumi.CustomResource):
                     "client_key": source_sql_client_cert.private_key,
                     "client_certificate": source_sql_client_cert.cert,
                     "ca_certificate": source_sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
                 },
                 "cloud_sql_id": "source-csql",
             },
@@ -1277,6 +1282,7 @@ class MigrationJob(pulumi.CustomResource):
                     "client_key": source_sql_client_cert.private_key,
                     "client_certificate": source_sql_client_cert.cert,
                     "ca_certificate": source_sql_client_cert.server_ca_cert,
+                    "type": "SERVER_CLIENT",
                 },
                 "cloud_sql_id": "source-csql",
             },

pulumi_gcp/databasemigrationservice/outputs.py

@@ -1060,12 +1060,12 @@ class ConnectionProfileMysqlSsl(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 ca_certificate: builtins.str,
+                 ca_certificate: Optional[builtins.str] = None,
                  client_certificate: Optional[builtins.str] = None,
                  client_key: Optional[builtins.str] = None,
                  type: Optional[builtins.str] = None):
         """
-        :param builtins.str ca_certificate: Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        :param builtins.str ca_certificate: Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
                The replica will use this certificate to verify it's connecting to the right host.
                **Note**: This property is sensitive and will not be displayed in the plan.
         :param builtins.str client_certificate: Input only. The x509 PEM-encoded certificate that will be used by the replica to authenticate against the source database server.
@@ -1077,7 +1077,8 @@ class ConnectionProfileMysqlSsl(dict):
         :param builtins.str type: (Output)
                The current connection profile state.
         """
-        pulumi.set(__self__, "ca_certificate", ca_certificate)
+        if ca_certificate is not None:
+            pulumi.set(__self__, "ca_certificate", ca_certificate)
         if client_certificate is not None:
             pulumi.set(__self__, "client_certificate", client_certificate)
         if client_key is not None:
@@ -1087,9 +1088,9 @@ class ConnectionProfileMysqlSsl(dict):
 
     @property
     @pulumi.getter(name="caCertificate")
-    def ca_certificate(self) -> builtins.str:
+    def ca_certificate(self) -> Optional[builtins.str]:
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """
@@ -1430,12 +1431,12 @@ class ConnectionProfileOracleSsl(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 ca_certificate: builtins.str,
+                 ca_certificate: Optional[builtins.str] = None,
                  client_certificate: Optional[builtins.str] = None,
                  client_key: Optional[builtins.str] = None,
                  type: Optional[builtins.str] = None):
         """
-        :param builtins.str ca_certificate: Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        :param builtins.str ca_certificate: Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
                The replica will use this certificate to verify it's connecting to the right host.
                **Note**: This property is sensitive and will not be displayed in the plan.
         :param builtins.str client_certificate: Input only. The x509 PEM-encoded certificate that will be used by the replica to authenticate against the source database server.
@@ -1447,7 +1448,8 @@ class ConnectionProfileOracleSsl(dict):
         :param builtins.str type: (Output)
                The current connection profile state.
         """
-        pulumi.set(__self__, "ca_certificate", ca_certificate)
+        if ca_certificate is not None:
+            pulumi.set(__self__, "ca_certificate", ca_certificate)
         if client_certificate is not None:
             pulumi.set(__self__, "client_certificate", client_certificate)
         if client_key is not None:
@@ -1457,9 +1459,9 @@ class ConnectionProfileOracleSsl(dict):
 
     @property
     @pulumi.getter(name="caCertificate")
-    def ca_certificate(self) -> builtins.str:
+    def ca_certificate(self) -> Optional[builtins.str]:
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """
@@ -1673,12 +1675,12 @@ class ConnectionProfilePostgresqlSsl(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 ca_certificate: builtins.str,
+                 ca_certificate: Optional[builtins.str] = None,
                  client_certificate: Optional[builtins.str] = None,
                  client_key: Optional[builtins.str] = None,
                  type: Optional[builtins.str] = None):
         """
-        :param builtins.str ca_certificate: Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        :param builtins.str ca_certificate: Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
                The replica will use this certificate to verify it's connecting to the right host.
                **Note**: This property is sensitive and will not be displayed in the plan.
         :param builtins.str client_certificate: Input only. The x509 PEM-encoded certificate that will be used by the replica to authenticate against the source database server.
@@ -1690,7 +1692,8 @@ class ConnectionProfilePostgresqlSsl(dict):
         :param builtins.str type: (Output)
                The current connection profile state.
         """
-        pulumi.set(__self__, "ca_certificate", ca_certificate)
+        if ca_certificate is not None:
+            pulumi.set(__self__, "ca_certificate", ca_certificate)
         if client_certificate is not None:
             pulumi.set(__self__, "client_certificate", client_certificate)
         if client_key is not None:
@@ -1700,9 +1703,9 @@ class ConnectionProfilePostgresqlSsl(dict):
 
     @property
     @pulumi.getter(name="caCertificate")
-    def ca_certificate(self) -> builtins.str:
+    def ca_certificate(self) -> Optional[builtins.str]:
         """
-        Required. Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
+        Input only. The x509 PEM-encoded certificate of the CA that signed the source database server's certificate.
         The replica will use this certificate to verify it's connecting to the right host.
         **Note**: This property is sensitive and will not be displayed in the plan.
         """