GCloud - Connecting App Engine Flex to Cloud SQL in other project

▲
2
▼

I'm trying to connect my app engine flex service to the cloud sql database that is in a shared project.

I have added the app engine default and app engine flex user as SQL admin to the shared project.

Now I'm trying to connect the app engine container to the cloud sql instance with the following connection string:

"Server=cloudsql;Database=cliche;User Id=user;Password=password;"

However, the connection always fails with the given connection string.

[13:57:37 ERR] An error occurred using the connection to database 'cliche' on server 'cloudsql'.
[13:57:37 ERR] An exception occurred while iterating over the results of a query for context type 'IKL.Data.ApplicationDbContext'.
 Microsoft.Data.SqlClient.SqlException (0x80131904): A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: TCP Provider, error: 40 - Could not open a connection to SQL Server)

As requested I provide the app.yaml here:

runtime: aspnetcore
env: flex
service: platform
manual_scaling:
  instances: 1
resources:
  cpu: 2
  memory_gb: 1.5
  disk_size_gb: 10
beta_settings:
  cloud_sql_instances: shared-resources-291914:europe-west3:edutec-mssql=tcp:1433
asp.net
google-app-engine
google-cloud-platform
google-cloud-sql
asked on Stack Overflow Oct 14, 2020 by Louis Campbell • edited Oct 15, 2020 by Louis Campbell

2 Answers

▲
3
▼

I found your issue! Your connexion string "Server=cloudsql;Database=cliche;User Id=user;Password=password;" isn't correct.

Cloud SQL proxy open a tunnel. one side of the tunnel is the Cloud SQL instance, the other is your local instance. Therefore you have to connect on the local host

"Server=127.0.0.1;Database=cliche;User Id=user;Password=password;"
answered on Stack Overflow Oct 15, 2020 by guillaume blaquiere
▲
0
▼

If you are using VPC Peering between your App Engine Flex project and your Cloud SQL project, then I must inform you that this is not possible to do yet, when you use an internal IP on your Cloud SQL, it will automatically use a VPC peering (different from the one you are probably using), and traffic between 3 VPC peerings is not posible.

You can use a VM in your Cloud SQL project to serve as a NAT server to route traffic onto your Cloud SQL there in order to workaround this, or you can use a Cloud VPN between your App Engine and Cloud SQL project, if possible please make sure that the NAT VM is in the same region as your Cloud SQL server or that the VPN on your SQL project is on the same region as your SQL server.

Also, please keep in mind that you would need to have the appropriate GCP firewall rules on all the involved GCP projects.

answered on Stack Overflow Oct 14, 2020 by Frank

User contributions licensed under CC BY-SA 3.0