[google-cloud-sql-discuss] Re: How can a private GKE cluster communicate with a Cloud SQL instance within the project.

Hi Kamran,

Thanks! I got this working. Is cloud proxy the only way? Would this work via authorized network setup?

- Shubhanan

On Thursday, June 7, 2018 at 6:18:55 PM UTC-5, Kamran (Google Cloud Support) wrote:

Hello Shubhanan,

As the Cloud Proxy requires to establish connections to external IP address of the Cloud SQL instance, if you wish to run Cloud Proxy on your GKE node(s), the nodes should be able to talk with the Cloud SQL instance's external IP address. Due to this requirement, you can setup NAT gateway(s) to achieve your design. 

For information on how to configure NAT gateway(s) for your GKE cluster please visit the following articles:

1.  https://cloud.google.com/solutions/connecting-securely#natgateway

2. https://cloud.google.com/vpc/docs/special-configurations#natgateway

3. https://cloud.google.com/vpc/docs/special-configurations#multiple-natgateways

4. https://cloud.google.com/solutions/using-a-nat-gateway-with-kubernetes-engine

On Wednesday, June 6, 2018 at 12:09:26 PM UTC-4, Shubhanan Bakre wrote:

Hi,

I have tried the steps for connecting from a GKE cluster to CloudSQL that are given here: https://cloud.google.com/sql/docs/mysql/connect-kubernetes-engine

However, the same steps do not work for a private GKE cluster with master authorized networks (https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters)

Can someone shed some light on how can this be achieved?

Thanks!

Shubhanan

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/03d9a850-8fa5-4452-aa84-c15556e15029%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.