GCP | How to access Cloud SQL private IP using Cloud SQL Auth Proxy and Identity-Aware Proxy (IAP)?

[@codeangler]

this is excellent. explain why and what it does; plus how to do it. clear and concise.

[@usuarioaleatorio336]

Thanks in advance. This video is perfect, it helped me as no other had done, and it is the most complete guide available here to face this problem propperly and without security gaps, thanks again!!

[@JoelGreijer-ye9be]

Thank you for clarifying these mysterious connection paths 🙂 Really helped me understand

[@dazdotdev]

Thanks so much for this, really the best resource online for configuring a production-grade proxy! I had to a do a little extra work setting up the IAM service account and extending the Firewall Rules for the IAM IAP connections, but you got me 90% of the way there.

[@purvashaha4763]

Hey, I am facing issue while creating fire wall rule, can you tell the description of firewall rule that you created?

[@purvashaha4763]

Also, do we need to create a separate iam service account for this or the default one works?

[@dazdotdev]

@@purvashaha4763 I created a separate one, with only Cloud SQL Access role for this specific use.

[@dazdotdev]

@@purvashaha4763 I followed the Docs IAP > Using TCP Forwarding > Create Firewall Rule, adding to my default network (can't paste link)

[@anandankanagarajan1805]

Excellent step-by-step tutorial. First of all thanks for it. In a environment, if a developer needs to access multiple CloudSQL instances like, Dev, Test, and Prod, on the single GCP VM installed with CloudSQL Auth Proxy, can we defined multiple connections with their respective (CloudSQL instances) connection string. Is the way to do it? It's some sort of vague understanding to me or not sure I am missing something here.

[@AwarSatar]

Great video! Do you know if there is a way to make this work with Cloud Run as well (having the API access the Data in the Cloud SQL database) without using Serverless VPC Connectors?

[@AhmadShehanshah]

Can I connect that Cloud sql instance name with my cloud run? Basically, I have a backend deployed on cloud run for which I have environment variables inlcluding Host name which is Public IP of Sql insatnce I want to setup Cloud sql insatnce name everywhere its required and also give access to developer using Private IP connection only (maybe) So, what should be my next steps? Also, thanks a lot for tutorial

[@luiseros1992]

I have a CI/CD pipeline outside google infrastructure. I need to connect to a SQL instance using the private IP. Can I set the SQL proxy in the CI/CD machine and connect to the DB without setting the IAP tunnel VM?

[@touchwithbabu]

Great explaination

[@greenworld5109]

thanks. the traffic from cloud sql auth proxy to cloud sql is through SSL...but from the local laptop to cloud sql auth proxy is not throgh SSL....how to secure also this path through SSL?

[@purvashaha4763]

I am facing issue in authentication of cloud auth proxy in ssh. What is possibility going wrong? Also in cmd, the command is giving error. Is there anything else i need to setup which is not mentioned in this video?

[@JacksonAbison]

great video, couldn't be more easier

[@heenagangrekar8337]

How can i connect to cloudsqladmin user who is by default a super user

[@princechaudhary9197]

Nice 👍👍👍

[@bohdanilchuk8865]

Unfortunately, it is not clear to me. You skip a lot of configurations. I get [4003: 'failed to connect to backend']. (Failed to connect to port 5432)

[@salehram]

It seems you are trying connect to a non-mysql port? Have you tried the default port 3306?

[@SubhraSarkar-t5n]

it is excellent

[@Team2-Practicum]

Where was the .json credentials come from, how can I get this file to my account?

[@dazdotdev]

IAM > Service Accounts > on your Key dropdown Actions menu > Manage Keys > Add Key > Download JSON

[@marcw.5492]

Right off GCP ?? no idea

[@plasmodiun1]

Falta el paso donde creas la vpc

[@ErnestMicklei-nh7tq]

Nice tutorial, too bad that we need an intermediate VM to get access

[@ahmedalthamari6995]

Can you connect to the VM proxy without the root user? Can you connect the VM proxy without using IAP?

[@salehram]

Yes you can if you setup a user on Cloud SQL that can connect to it. I only used the root because of the demo, however you can just create a user inside mysql and just use that normally... For the VM proxy and IAP, if you have the Cloud SQL behind a private IP only, meaning there is no public IP on that Cloud SQL instance, then your only option is to use a VM in GCP and use Cloud SQL Proxy and IAP - or you can ignore the IAP if you expose the VM to public IP address but it is not a good idea...

[@nishitkumar7650]

@@salehram hi we use vpn to connect to the database instance, I have a question regarding cloud SQL auth proxy that I want to install it on my windows system with establish connection to my db , and need to access the db using heildi SQL client is possible.

[@nishitkumar7650]

Also my cloud SQL instance is with MySQL & not postegre so does cloud SQL auth proxy work with MySQL cloud SQL.