You can use the Commvault software to back up and restore a PostgreSQL server instance that is hosted in the Google cloud.
The VM instance must have access to the Google Cloud service endpoints. The VM instance that is acting as a proxy must have communication with the database instances that will be backed up. To ensure this connectivity, the security group rule for database instance must be added. This allows connection from the proxy on the port where the database instance is running. The default port for PostgreSQL is 5432.
Note
From Service Pack 20 onwards, you can create the hypervisor for Google Cloud Database only from the Command Center. However, you can still use the existing hypervisors and perform backup and restore operations from the CommCell Console.
User Account Requirements
For DumpBasedBackupSet, verify that the PostgreSQL agent has a user account with sufficient privileges to perform the following:
-
Perform backup and restore operations
-
Access the PostgreSQL database objects as part of the subclient content
The following table illustrates the necessary privileges the user account should have to perform backup and restore operations:
Operations
Privileges PostgreSQL User Should Have
Backup
CREATEDB, CREATEROLE
Restore
CREATEDB, CREATEROLE, INHERIT, LOGIN
CONNECTION LIMIT, if set, should at least have a value of 2.
Initially, the user account credentials are provided during the instance configuration after the installation of the agent. You can change the user account at the instance level.
-
If the database instances are configured across Google Cloud projects, create a service account in one project. In other projects that have PostgreSQL database instances, add an IAM principal with Cloud SQL Viewer permission.
For creating a cloud account, use the service account for authentication that will discover PostgreSQL instances in all projects. You must use the same service account that is added as an IAM principal to create a cloud account. Verify that the Google Cloud VM instance has access to the PostgreSQL database instance.
SSL and TLS Support
The supported TLS versions to create Google Cloud SSL encrypted PostgreSQL instances are TLS 1.0, 1.1 and 1.2.