CloudSQL Private IP instance support (ServiceNetworkingConnection)

[nrobert13]

would be nice to be able to customize the Instance, like:

• connectivity type ( Private/ Public IP)
• associated networking ( Private IP )
• authorized networks ( Public IP )

[AlexBulankou]

@nrobert13 , thanks for reporting ti! It will be possible once Config Connector supports ServiceNetworkingConnection resource, similar to Terraform's google_service_networking_connection . Then you should be able to configure private IP instance, similar how you can do with TF.
Will that address your scenario?
Is not being able to configure private IP instance currently blocking for you?

[nrobert13]

Hi Alex,

we were able to create an SQL instance with both the Public/Private IP connectivity and configure associated networks, the only thing missing is the authorized networks.
Used this manifest:

---
apiVersion: sql.cnrm.cloud.google.com/v1alpha3
kind: SQLInstance
metadata:
  name: inst2912
  namespace: test
spec:
  databaseVersion: POSTGRES_9_6
  region: europe-west1
  settings:
    tier: db-f1-micro
    ipConfiguration:
      privateNetwork: "projects/test/global/networks/cluster-2-test-network"
      ipv4Enabled: true

not sure though if this is planned/expected behavior of the controller or just accidental, as the only thing what we specify is the privateNetwork and still the Public IP is getting configured on the resource.

[kibbles-n-bytes]

Thanks nrobert13; we are currently working on support for ServiceNetworkingConnection, which will set up the private SQL instance peering. We will follow up with a change to SQLInstance to convert the spec.settings.ipConfiguration.privateNetwork field into a resource reference in order to match the other reference patterns.

[AlexBulankou]

@nrobert13 , ServiceNetworkingConnection is now supported (examples ) - does it work for your requirements?

[kibbles-n-bytes]

Closing this issue out now that ServiceNetworkingConnection is supported.