public
manage the public endpoint (IP allowlist)
Manage a database's public endpoint.
Off by default. Your services reach the database privately, and
csph db tunnel covers laptops without any public address. Turn the
public endpoint on for BI tools and integrations that can't use the tunnel.
Only addresses on the allowlist can connect, and TLS is verified
(sslmode=verify-full). Where the database's certificate comes from its own
CA, csph db connection-string <name> --public --save-ca saves the CA file.
Subcommands
| Command | Description |
|---|---|
| show | show the public endpoint and its allowlist |
| enable | turn the public endpoint on |
| disable | turn the public endpoint off |
| allow | add addresses to the allowlist |
| deny | remove addresses from the allowlist |
See also
- csph db — manage SphereDB databases