AppendGCPClientCert calls the GCP API to generate an ephemeral certificate and adds it to the TLS config.

GetGCPRequireSSL requests settings for the project/instance in session from GCP and returns true when the instance requires SSL.

NewDiscoveryResourceChecker creates a new DiscoveryResourceChecker.

NewIAM returns a new IAM configurator service.

NewMetadata returns a new cloud metadata service.

DiscoveryResourceCheckerConfig is the config for DiscoveryResourceChecker.

IAM is a service that manages IAM policies for cloud databases.

IAMConfig is the IAM configurator config.

Metadata is a service that fetches cloud databases metadata.

MetadataConfig is the cloud metadata service config.

DiscoveryResourceChecker defines an interface for checking database resources created by the discovery service.