In-transit encryption client library code sample

import ( "context" "crypto/tls" "crypto/x509" "errors" "fmt" "io" "time" memorystore "cloud.google.com/go/redis/apiv1" redispb "cloud.google.com/go/redis/apiv1/redispb" "github.com/go-redis/redis/v8" ) // ConnectToDatabase demonstrates how to use go-redis library to connect to a // Memorystore Redis instance. func ConnectToDatabase(w io.Writer, projectID, location, instanceID string) error { // Instantiate a Redis administrative client ctx := context.Background() adminClient, err := memorystore.NewCloudRedisClient(ctx) if err != nil { return err } defer adminClient.Close() req := &redispb.GetInstanceRequest{ Name: fmt.Sprintf("projects/%s/locations/%s/instances/%s", projectID, location, instanceID), } instance, err := adminClient.GetInstance(ctx, req) if err != nil { return err } fmt.Fprintln(w, instance) // Load CA cert caCerts := instance.GetServerCaCerts() if len(caCerts) == 0 { return errors.New("memorystore: no server CA certs for instance") } caCertPool := x509.NewCertPool() caCertPool.AppendCertsFromPEM([]byte(caCerts[0].Cert)) // Setup Redis Connection pool client := redis.NewClient(&redis.Options{ Addr: fmt.Sprintf("%s:%d", instance.Host, instance.Port), Password: "PASSWORD", PoolSize: 1, MinIdleConns: 1, PoolTimeout: 0, IdleTimeout: 20 * time.Second, DialTimeout: 2 * time.Second, TLSConfig: &tls.Config{ RootCAs: caCertPool, }, }) p, err := client.Ping(ctx).Result() if err != nil { return err } fmt.Fprintf(w, "Response:\n%s", p) return nil }