The Cloud SQL Proxy provides secure access to your Cloud SQL Second Generation instances without having to whitelist IP addresses or configure SSL.
This Helm chart provides a containerised cloud sql service within your Kubernetes cluster.
Below is a list of all configuration parameters available, items in bold are required settings
| Parameter | Description | Default |
|---|---|---|
gcp.project |
Google Cloud Platform project | projectname |
gcp.region |
Google Cloud Platford region | europe-west2 |
gcp.instance |
Name of your Cloud SQL instance | cloudsql-instance |
image.name |
The image repository to pull | b.gcr.io/cloudsql-docker/gce-proxy |
image.tag |
The image tag to pull | latest |
replicaCount |
Number of pods to run in deployment | 1 |
bind.addr |
Bind address for the container | 0.0.0.0 |
bind.port |
Bind port for the container | 3306 |
service.name |
Service name | cloudsql-proxy |
service.type |
Service type | ClusterIP |
service.externalPort |
Service external port | 3306 |
credentials.path |
Where to mount credentials | /secrets/cloudsql |
credentials.file |
Where to look for a credentials file | credentials.json |
credentials.secret |
The name for the credentials secret | nil |
credentials.secret_enabled |
Whether to create a credentials secret | true |
credentials.b64enc |
Base64 encoded credentials | nil |
ssl.path |
SSL mount path within container | /etc/ssl/certs |
ssl.hostpath |
SSL certs host location | /etc/ssl/certs |
$ git clone https://github.com/ajcrowe/cloudsql-proxy-chart.git cloudsql-proxy
$ helm install --name my-cloudsql-proxy \
--set gcp.project=my-gcp-project \
--set gcp.region=europe-west1 \
--set gcp.instance=my-cloudsql-master \
--set credentials.file=/path/to/credentials.json
cloudsql-proxy$ helm delete my-cloud-proxy