{
"databases": [
"<string>"
]
}Lists all databases within an instance without creating them. Permissions required: bb.instances.get
{
"databases": [
"<string>"
]
}The instance id.
The name of the instance. Format: instances/{instance}
The target instance. We need to set this field if the target instance is not created yet.
Show child attributes
ENGINE_UNSPECIFIED, CLICKHOUSE, MYSQL, POSTGRES, SNOWFLAKE, SQLITE, TIDB, MONGODB, REDIS, ORACLE, SPANNER, MSSQL, REDSHIFT, MARIADB, OCEANBASE, STARROCKS, DORIS, HIVE, ELASTICSEARCH, BIGQUERY, DYNAMODB, DATABRICKS, COCKROACHDB, COSMOSDB, TRINO, CASSANDRA Show child attributes
DATA_SOURCE_UNSPECIFIED, ADMIN, READ_ONLY Use SSL to connect to the data source. By default, we use the system's SSL configuration.
verify_tls_certificate enables TLS certificate verification for SSL connections. Default is false (no verification) for backward compatibility. Set to true for secure connections (recommended for production). Only set to false for development or when certificates cannot be properly validated (e.g., self-signed certs, VPN environments).
srv, authentication_database, and replica_set are used for MongoDB. srv is a boolean flag that indicates whether the host is a DNS SRV record.
authentication_database is the database name to authenticate against, which stores the user credentials.
replica_set is used for MongoDB replica set.
sid and service_name are used for Oracle.
SSH related The hostname of the SSH server agent.
The port of the SSH server agent. It's 22 typically.
The user to login the server.
The password to login the server. If it's empty string, no password is required.
The private key to login the server. If it's empty string, we will use the system default private key from os.Getenv("SSH_AUTH_SOCK").
PKCS#8 private key in PEM format. If it's empty string, no private key is required. Used for authentication when connecting to the data source.
Passphrase for the encrypted PKCS#8 private key. Only used when the private key is encrypted.
Show child attributes
SECRET_TYPE_UNSPECIFIED, VAULT_KV_V2, AWS_SECRETS_MANAGER, GCP_SECRET_MANAGER AUTH_TYPE_UNSPECIFIED, TOKEN, VAULT_APP_ROLE Show child attributes
The role ID for Vault AppRole authentication.
the secret id for the role without ttl.
The type of secret for AppRole authentication.
SECRET_TYPE_UNSPECIFIED, PLAIN, ENVIRONMENT The path where the approle auth method is mounted.
engine name is the name for secret engine.
the secret name in the engine to store the password.
the key name for the password.
TLS configuration for connecting to Vault server. These fields are separate from the database TLS configuration in DataSource. skip_vault_tls_verification disables TLS certificate verification for Vault connections. Default is false (verification enabled) for security. Only set to true for development or when certificates cannot be properly validated.
CA certificate for Vault server verification.
Client certificate for mutual TLS authentication with Vault.
Client private key for mutual TLS authentication with Vault.
AUTHENTICATION_UNSPECIFIED, PASSWORD, GOOGLE_CLOUD_SQL_IAM, AWS_RDS_IAM, AZURE_IAM Show child attributes
ARN of IAM role to assume for cross-account access. See: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html
Optional external ID for additional security when assuming role. See: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html
Show child attributes
Show child attributes
direct_connection is used for MongoDB to dispatch all the operations to the node specified in the connection string.
Region is the location of the database, used for AWS RDS. For example, us-east-1.
warehouse_id is used by Databricks.
master_name is the master name used by connecting redis-master via redis sentinel.
master_username and master_obfuscated_password are master credentials used by redis sentinel mode.
REDIS_TYPE_UNSPECIFIED, STANDALONE, SENTINEL, CLUSTER Cluster is the cluster name for the data source. Used by CockroachDB.
The interval between automatic instance synchronizations.
The maximum number of connections. The default is 10 if the value is unset or zero.
Enable sync for the following databases. Default empty, means sync all schemas & databases.
The lower_case_table_names config for MySQL instances. It is used to determine whether the table names and database names are case sensitive.
Show child attributes
The role name.
The connection count limit for this role.
The expiration for the role's password.
The role attribute. For PostgreSQL, it contains super_user, no_inherit, create_role, create_db, can_login, replication and bypass_rls. Docs: https://www.postgresql.org/docs/current/role-attributes.html For MySQL, it is the global privileges as GRANT statements, which means it only contains "GRANT ... ON . TO ...". Docs: https://dev.mysql.com/doc/refman/8.0/en/grant.html
OK
All database name list in the instance.
Was this page helpful?