CODEWITHSUNDEEP
google-cloud-platformgoogle-cloud-sqlpsql
Thibault Mary
Thibault Mary

Reputation: 1

Connecting to Postgres SQL instance (private ip) with psql client

I have a problem to connect on my CloudSQL Postgres instance with a psql client. I followed the documentation https://cloud.google.com/sql/docs/postgres/connect-admin-proxy.

I have enable the Cloud SQL Admin API & installed the cloud_sql_proxy :

wget https://dl.google.com/cloudsql/cloud_sql_proxy.linux.amd64 -O cloud_sql_proxy
chmod +x cloud_sql_proxy

I use my credential SDK Cloud who have all the rights and i have set the good project :

gcloud config set project gta-staging-280808

Next, i have launch the following comandes :

To test with TCP sockets :

./cloud_sql_proxy -instances=gta-staging-280808:europe-west1:${INSTANCE_ID}=tcp:5432
psql "host=127.0.0.1 sslmode=disable dbname=${DB_NAME} user=${USER}"

To test with Unix sockets :

./cloud_sql_proxy -dir=/cloudsql &
psql "sslmode=disable host=/cloudsql/gta-staging-280808:europe-west1:${INSTANCE_ID} user={USER}"

Result:

2020/08/27 15:36:39 New connection for "gta-staging-280808:europe-west1:${INSTANCE_ID}"

2020/08/27 15:40:59 couldn't connect to "gta-staging-280808:europe-west1:${INSTANCE_ID}": dial tcp XX.XX.XX.XX:3307: connect: connection timed out

There is no SSH. The VPC is the default.

Why it's doesn't work? Do you have any idea?

Upvotes: 0

Views: 840

Answers (1)

Ajordat
Ajordat

Reputation: 1392

This error could be caused due to many reasons, in the end it says that the client cannot reach the instance. Still, in this case, I suspect you are trying to connect to the Cloud SQL instance using the SQL proxy from the Cloud Shell.

Assuming that you are using the Cloud Shell, the steps that you made would work if the instance had a public IP. Even if you are authenticated with an account that should have access to the instance, the proxy must be run from a resource with access to the same VPC network as the SQL instance, which is not the case of the Cloud Shell.

On the same note, you could access the SQL instance from GCE if you had an instance using the same network. Check out this guide, to attempt a connection from within a GCE instance, which is essentially the same but allocating an IP address range. If you want to connect from the Cloud Shell, you will need to use a public IP in which case the guide you provided will work.

I have reproduced both connections from the Cloud Shell and from GCE in order to verify this answer.

Upvotes: 0

Related Questions