https://github.com/cockroachlabs-field/google-cloud-run
Google Cloud Run with a Serverless VPC Connector for CockroachCloud
https://github.com/cockroachlabs-field/google-cloud-run
cockroachdb google-cloud-run serverless vpc-peering
Last synced: about 2 months ago
JSON representation
Google Cloud Run with a Serverless VPC Connector for CockroachCloud
- Host: GitHub
- URL: https://github.com/cockroachlabs-field/google-cloud-run
- Owner: cockroachlabs-field
- Created: 2020-10-14T02:29:46.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2020-10-16T01:55:39.000Z (over 5 years ago)
- Last Synced: 2025-10-30T21:43:39.333Z (7 months ago)
- Topics: cockroachdb, google-cloud-run, serverless, vpc-peering
- Language: Python
- Homepage:
- Size: 6.84 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Google Cloud Run using a Serverless VPC Connector for CockroachCloud
## High Level Steps
1) Create You're Own VPC in GCloud
2) Create CockroachCloud cluster
- Create a SQL user
- Create a VPC Peering between CockroachCloud and your new VPC in step 1
3) Create VPC Serverless Connector
4) Deploy a container in Google Cloud Run
## Step 1 - Create A New VPC for your Google Run app
In Google cloud, create a new VPC
_Console --> VPC Networks_
- Name = chrisc-vpc
- Use a Custom subnet
- CIDR Range: 10.0.0.0/28 => 16 IPs
- Dynamic Routing = Regional
- DNS Server Policy = None
- Private Google Access = Off (we should try with on)
- Click Create
- Record your Project Id and the name of the new VPC
**NOTE: Keep track of your CIDR range to know your range of IPs**
## Step 2 - Create a CockroachCloud Cluster
Create a CockroachCloud cluster
Add a new SQL User
Add a VPC Peering connection (need Project Id and name of VPC network created in Step 1)
Verify VPC Connection in your new VPC. The verification command should look something like this and is generated from the CockroachCloud VPC Peering "Connect" button:
```
gcloud --project cockroach-chrisc compute networks peerings create chrisc-cc-gcp --network=chrisc-vpc --peer-network=crdb --peer-project=crl-prod-5th --auto-create-routes
```
Also get the Connect URL for the database and the required cert.
Place the cert in a /certs folder in this directory.
```
mkdir certs
```
## Step 3 - Create VPC Servlerless Connector
In Google console, go toS "Console" -> "Serverless VPC Access"
**Very important: When creating make sure that the CIDR range for the connector doesn't overlap with the VPC. If you're not sure of your CIDR range, you can figure it using a CIDR calculator: https://www.ipaddressguide.com/cidr**
- Click "Create Connector"
- Give the connector a name: "cc-connector"
- Create in same region as created VPC
- Region = us-east4
- Network = chrisc-vpc (the name from Step 1)
- Click Create
- Validate the connector creates successfully
- Choose the Route all traffic option. (Should we try this Private IP setup?)
## Step 4 - Run Google Run
### Local Testing with Docker (Optional)
Instead of using the VPC Peering connection string, us a public IP instead. To do this, you can create a whitelisted IP in CockroachCloud for your local machine.
```
docker build -t chriscasano/gcr:latest .
export COCKROACH_URI="postgres://chris:@clerk-test-5th.gcp-us-east4.cockroachlabs.cloud:26257/defaultdb?sslmode=require&sslrootcert=/app/certs/clerk-test-ca.crt"
docker run -p 8080:8080 --env COCKROACH_URI chriscasano/gcr
```
## Google Build
Docs: https://cloud.google.com/run/docs/quickstarts/build-and-deploy?_ga=2.147364543.-903456326.1570542011
Add the container to the registry
```
gcloud builds submit --tag gcr.io/cockroach-chrisc/cctest
```
~~gcloud run deploy --image gcr.io/cockroach-chrisc/cctest --platform managed~~
~~Choose the region, service name and Y for allow unauthenticated invocations~~
Go to Cloud Run (GCP Console --> "Cloud Run")
Click Create Service
Service Settings:
- Fully Managed, Region = us-east4
- Service name = cctest
- Allow unauthenticated invocations
Service Revisions:
- Choose your latest image
- In Advanced Settings -> Variables -> Add Variables
- ```COCKROACH_URI = postgres://chris:@clerk-test-5th.gcp-us-east4.cockroachlabs.cloud:26257/defaultdb?sslmode=require&sslrootcert=/app/certs/clerk-test-ca.crt```
- In Advanced Settings -> Connections -> VPC Connector
- VPC Connector = Choose Custom
- Select your serverless vpc connector = "cc-connector"
- Select "Route All Traffic Through VPC Connector"
Deploy the container in Google Cloud Run
Once deployed, check the logs of the running container. If you see this...
```
2020-10-16T01:40:12.832159Z Connecting to database...
2020-10-16T01:40:13.011622Z DB Connection Success
2020-10-16T01:40:13.014043Z SQL Executed!
```
Then you can get the....
# Champagne!
#### Container debugging tools
```
apt-get update
apt-get install net-tools
apt-get install iputils-ping
```