Enabling or Disabling SSL

Scenarios

You can enable or disable SSL for a Supabase application on the console.

SSL certificates are provided by Cloud Certificate & Manager (CCM) and must be purchased separately.

Prerequisites

• Sign up for a Huawei Cloud account.
• If you need fine-grained management of resources on Huawei Cloud, use Identity and Access Management (IAM) to create IAM users and user groups, and grant them specific permissions so that the IAM users can obtain required permissions. For details, see Using IAM Roles or Policies to Grant Access to RDS.
• You must use a login account assigned the rds:aiApplication:switchSsl, rds:aiApplication:get, and rds:aiApplication:list actions.
• Before enabling SSL, ensure that you have purchased a Huawei Cloud CCM SSL certificate.

Constraints

• SSL cannot be enabled or disabled for applications that are undergoing active operations or in an abnormal state.
• Supabase application features are unavailable while you are enabling or disabling SSL. Perform this operation during off-peak hours to avoid affecting peak-time workloads.

Precautions

If SSL is enabled or disabled for a Supabase application, you must manually update the protocol settings in the corresponding feature interfaces for the following scenarios involving Auth configuration to ensure that the protocols match. Use HTTP when SSL is disabled and SSL when SSL is enabled. If the protocols do not match, Auth may malfunction or become unavailable, interrupting running workloads and causing security and functionality issues.

• Email authentication is selected and enabled in identity provider (IdP) settings.
• GitHub authentication is selected and enabled in IDP settings.
• Email templates are configured and email template files are hosted on Supabase Storage.
• In access control settings, the external access address of the application is set to a public or private IP address of Supabase.

Procedure