GCP Cloud SQL

Deploy and manage fully managed relational databases (PostgreSQL, MySQL, SQL Server) on Google Cloud.

When to Use

• Running production relational databases without managing replication, patching, or backups
• Migrating on-premises PostgreSQL or MySQL workloads to a managed service
• Applications requiring ACID transactions, relational schemas, and SQL query support
• Workloads that need automated high availability with regional failover

Prerequisites

Confirm project/region, database edition/version and cost before provisioning. Examples require adaptation: IAM database auth needs the database flag, an IAM database user and login permissions in addition to cloudsql.client; a built-in appuser is not automatically IAM-enabled. Grant application database privileges explicitly. Auth Proxy does not create private network connectivity; use --private-ip and an existing route for private-only instances. Pin and verify the proxy binary from official releases. Backups/HA are not a tested DR plan; exports expose data and imports/promotion/restarts require an approved target/recovery plan. Terraform stores passwords in state; protect it. Preserve existing authorized-network/flag settings when patching rather than replacing them accidentally.

• Google Cloud SDK (gcloud) installed and authenticated
• Cloud SQL Admin API and Service Networking API enabled
• IAM role roles/cloudsql.admin for full management