allow using ssl for db connection (#432)

* optionally specify SSL usage for db engine

* re-trigger

Author: diegocepedaw

configs/config.yaml

@@ -18,6 +18,7 @@ db:
       charset: utf8
       echo: True
     str: "%(scheme)s://%(user)s:%(password)s@%(host)s:%(port)s/%(database)s?charset=%(charset)s"
+    use_ssl: False
   kwargs:
     pool_recycle: 3600
 healthcheck_path: /tmp/status

src/oncall/db.py

@@ -1,7 +1,5 @@
-# Copyright (c) LinkedIn Corporation. All rights reserved. Licensed under the BSD-2 Clause license.
-# See LICENSE in the project root for license information.
-
 from sqlalchemy import create_engine
+import ssl
 
 connect = None
 DictCursor = None
@@ -13,8 +11,17 @@ def init(config):
     global DictCursor
     global IntegrityError
 
-    engine = create_engine(config['conn']['str'] % config['conn']['kwargs'],
-                           **config['kwargs'])
+    connect_args = {}
+    if config['conn'].get('use_ssl'):
+        ssl_ctx = ssl.create_default_context()
+        connect_args["ssl"] = ssl_ctx
+
+    engine = create_engine(
+        config['conn']['str'] % config['conn']['kwargs'],
+        connect_args=connect_args,
+        **config['kwargs']
+    )
+
     dbapi = engine.dialect.dbapi
     IntegrityError = dbapi.IntegrityError