Create a DigitalOcean managed database cluster (e.g. PostgreSQL or Valkey) via API and retrieve connection details, CA cert, and set trusted sources

Documented steps

1. POST https://api.digitalocean.com/v2/databases with required fields name, engine, region, size, num_nodes. Example: {"name":"backend","engine":"pg","region":"nyc3","size":"db-s-2vcpu-4gb","num_nodes":1}. Engine slugs include pg (PostgreSQL), mysql, valkey (Redis-compatible), mongodb, kafka, opensearch.
2. The cluster starts in status 'creating'. Poll GET https://api.digitalocean.com/v2/databases/{cluster_uuid} until status is 'online' (often several minutes).
3. Connection details (host, port, user, password, ssl) are in the cluster object's connection / private_connection fields from the same GET.
4. Fetch the cluster CA certificate for verified TLS: GET https://api.digitalocean.com/v2/databases/{cluster_uuid}/ca — decode the base64 certificate field to a ca.crt file.
5. Restrict access with trusted sources: PUT https://api.digitalocean.com/v2/databases/{cluster_uuid}/firewall with {"rules":[{"type":"ip_addr","value":"203.0.113.5"},{"type":"droplet","value":"<droplet-id>"},{"type":"tag","value":"web"},{"type":"app","value":"<app-id>"}]} (GET the same path to read current rules).
6. Docs: https://docs.digitalocean.com/products/databases/ and https://docs.digitalocean.com/reference/api/