-
If you haven't already, set up a Node.js Development Environment by following the Node.js setup guide and create a project.
-
Create a 2nd Gen Cloud SQL Instance by following these instructions. Note the connection string, database user, and database password that you create.
-
Create a database for your application by following these instructions. Note the database name.
-
Create a service account with the 'Cloud SQL Client' permissions by following these instructions. Download a JSON key to use to authenticate your connection.
-
Use the information noted in the previous steps:
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service/account/key.json
export INSTANCE_CONNECTION_NAME='<MY-PROJECT>:<INSTANCE-REGION>:<INSTANCE-NAME>'
export DB_USER='my-db-user'
export DB_PASS='my-db-pass'
export DB_NAME='my_db'Note: Saving credentials in environment variables is convenient, but not secure - consider a more secure solution such as Cloud KMS or Secret Manager to help keep secrets safe.
To run this application locally, download and install the cloud_sql_proxy by
following the instructions.
Instructions are provided below for using the proxy with a TCP connection or a Unix Domain Socket. On Linux or Mac OS you can use either option, but on Windows the proxy currently requires a TCP connection.
To run the sample locally with a TCP connection, set environment variables and launch the proxy as shown below.
Use these terminal commands to initialize environment variables:
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service/account/key.json
export DB_HOST='127.0.0.1:3306'
export DB_USER='<DB_USER_NAME>'
export DB_PASS='<DB_PASSWORD>'
export DB_NAME='<DB_NAME>'Then use this command to launch the proxy in the background:
./cloud_sql_proxy -instances=<project-id>:<region>:<instance-name>=tcp:3306 -credential_file=$GOOGLE_APPLICATION_CREDENTIALS &Use these PowerShell commands to initialize environment variables:
$env:GOOGLE_APPLICATION_CREDENTIALS="<CREDENTIALS_JSON_FILE>"
$env:DB_HOST="127.0.0.1:3306"
$env:DB_USER="<DB_USER_NAME>"
$env:DB_PASS="<DB_PASSWORD>"
$env:DB_NAME="<DB_NAME>"Then use this command to launch the proxy in a separate PowerShell session:
Start-Process -filepath "C:\<path to proxy exe>" -ArgumentList "-instances=<project-id>:<region>:<instance-name>=tcp:3306 -credential_file=<CREDENTIALS_JSON_FILE>"NOTE: this option is currently only supported on Linux and Mac OS. Windows users should use the Launch proxy with TCP option.
To use a Unix socket, you'll need to create a directory and give write access to the user running the proxy. For example:
sudo mkdir /path/to/the/new/directory
sudo chown -R $USER /path/to/the/new/directoryYou'll also need to initialize an environment variable containing the directory you just created:
export DB_SOCKET_PATH=/path/to/the/new/directoryUse these terminal commands to initialize other environment variables as well:
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service/account/key.json
export INSTANCE_CONNECTION_NAME='<MY-PROJECT>:<INSTANCE-REGION>:<INSTANCE-NAME>'
export DB_USER='<DB_USER_NAME>'
export DB_PASS='<DB_PASSWORD>'
export DB_NAME='<DB_NAME>'Then use this command to launch the proxy in the background:
./cloud_sql_proxy -dir=$DB_SOCKET_PATH --instances=$INSTANCE_CONNECTION_NAME --credential_file=$GOOGLE_APPLICATION_CREDENTIALS &Next, setup install the requirements with npm:
npm installFinally, start the application:
npm startNavigate towards http://127.0.0.1:8080 to verify your application is running correctly.
To run on GAE-Standard, create an App Engine project by following the setup for these instructions.
First, update app.standard.yaml with the correct values to pass the environment
variables into the runtime.
Next, the following command will deploy the application to your Google Cloud project:
gcloud app deploy app.standard.yamlTo launch your browser and view the app at https://[YOUR_PROJECT_ID].appspot.com, run the following command:
gcloud app browseFirst, update app.flexible.yaml with the correct values to pass the environment
variables into the runtime.
Next, the following command will deploy the application to your Google Cloud project:
gcloud app deploy app.flexible.yamlTo launch your browser and view the app at https://[YOUR_PROJECT_ID].appspot.com, run the following command:
gcloud app browseSee the Cloud Run documentation for more details on connecting a Cloud Run service to Cloud SQL.
- Build the container image:
gcloud builds submit --tag gcr.io/[YOUR_PROJECT_ID]/run-sql- Deploy the service to Cloud Run:
gcloud run deploy run-sql --image gcr.io/[YOUR_PROJECT_ID]/run-sqlTake note of the URL output at the end of the deployment process.
- Configure the service for use with Cloud Run
gcloud run services update run-sql \
--add-cloudsql-instances [INSTANCE_CONNECTION_NAME] \
--set-env-vars INSTANCE_CONNECTION_NAME=[INSTANCE_CONNECTION_NAME],\
DB_USER=[MY_DB_USER],DB_PASS=[MY_DB_PASS],DB_NAME=[MY_DB]Replace environment variables with the correct values for your Cloud SQL instance configuration.
This step can be done as part of deployment but is separated for clarity.
It is recommended to use the Secret Manager integration for Cloud Run instead of using environment variables for the SQL configuration. The service injects the SQL credentials from Secret Manager at runtime via an environment variable.
Create secrets via the command line:
echo -n $INSTANCE_CONNECTION_NAME | \
gcloud secrets create [INSTANCE_CONNECTION_NAME_SECRET] --data-file=-Deploy the service to Cloud Run specifying the env var name and secret name:
gcloud beta run deploy SERVICE --image gcr.io/[YOUR_PROJECT_ID]/run-sql \
--add-cloudsql-instances $INSTANCE_CONNECTION_NAME \
--update-secrets INSTANCE_CONNECTION_NAME=[INSTANCE_CONNECTION_NAME_SECRET]:latest,\
DB_USER=[DB_USER_SECRET]:latest, \
DB_PASS=[DB_PASS_SECRET]:latest, \
DB_NAME=[DB_NAME_SECRET]:latest- Navigate your browser to the URL noted in step 2.
For more details about using Cloud Run see http://cloud.run. Review other Node.js on Cloud Run samples.