Configure Google Cloud Database for PostgreSQL Server Running on Cloud

The databases server configuration guides you through creating a backup plan and adding a Google Cloud Database for PostgreSQL.

  1. From the navigation pane, go to Explore > Service catalog.

  2. On the Service Catalog page, in the Databases tile, click Configure.

  3. On the Configure Database Server page, select Database running in the cloud (PaaS).

  4. Select Google Cloud Platform, and then click Next.

  5. On Configure Google Cloud Database page, select PostgreSQL, and then click Next.

    The Configure Google Cloud database - PostgreSQL page appears.

Configure Service Account

Use a Google Cloud service account credential to authenticate with Google Cloud resources for backup, restore, and management operations.

To create a new service account with required permissions, do the following:

  1. Beside the Credential field, click + button .

  2. On the Add credential dialog box, do the following:

    1. From the Credential vault list, select a credential vault

    2. In the Credential name box, enter the name of the credential.

    3. Create a service account. After the account is created, the Service account ID field is populated with an ID number.

    4. In the Private key file, upload the JSON key file that is associated with the Google Cloud service account.

    5. In the Description box, enter the credential description.

    6. From the Key Rotation Reminder Interval list, Specifies how often the system reminds you to rotate the service account key.

    7. Click Save.

  3. Click Next.

When you use an existing service account, ensure that the service account has the required Google Cloud permissions.

When you select Use existing service account, do the following:

  1. Using the Use service account associated to the access node option.

    • If you do not move the Use service account associated to the access node toggle to right, from the Credential list, select an existing credential, and then click Next.

    • If you move the Use service account associated to the access node toggle to right, and then click Next.

  2. The Configure access nodes page appears.

Access Node

You can select your own access node for the backups.

  1. When you do not move the Use service account associated to the access node toggle to right, do the following:

    1. On the Configure access nodes page, you can select the following two options:

      • Use hosted infrastructure

      • Use your access nodes for backups

    2. If you select Use hosted infrastructure, from the Region list, selected a region of the hosted infrastructure.

    3. If you select Use your access nodes for backups, from the Access nodes list, select an existing access node or add a new access node.

    4. Click Next.

  2. When you move the Use service account associated to the access node toggle to right, do the following:

    1. On the Configure access nodes page, from the Access node list, select an existing access node or add a new access node.

    2. Click Next.

Plan

  1. Select an existing backup plan or create a new backup plan.

    1. Click the add button add/plus button - gray - no border.

      The Add plan dialog box appears.

    2. In the Plan name box, enter a descriptive name for the backup plan.

    3. Select an existing Storage or add a new storage.

    4. Select Configure backups and perform schedule and retention settings.

      1. Define the frequency and retention period of your backup.

      2. Under Add extended retention, define the following:

        • From the Backups to retain list, select the kind of backup you want to retain.

        • From the Retention period list, select the days for which you want to retain the backup.

      3. Select Add second copy to create a second copy for redundancy across different storage or regions.

      4. Select Add third copy to create the third copy for maximum redundancy.

    5. Click Save.

  2. Click Next.

  3. The Cloud Account page appears.

Cloud Account

The cloud account is used to access the databases for discovery, backups, and other operations.

  1. Select an existing cloud account or create a new cloud account.

    Note

    The cloud account for a cloud database instance cannot be modified after the instance is created. Deleting a cloud account or hypervisor permanently deconfigures all associated cloud database instances. Deleting a server from (Manage > Servers) permanently removes all associated cloud database instances. Before deleting a cloud account, hypervisor, or server, ensure that you understand the impact on dependent resources and retain any required backup data.

    Steps to add new cloud account
    1. Beside the Cloud account field, click +.

      The Add cloud account dialog box appears.

    2. In the Name box, type the name for the account.

    3. From the Credential list, select an existing credential or add a new credential. To add a new credential, do the following:

      Steps to add a cloud account credential
      1. From the Credential vault list, select a credential vault.

      2. In the Credential name box, enter the name of the credential.

      3. Upload the Private key file.

      4. In the Description, enter the description of the description.

      5. From the Key Rotation Reminder Interval list, Specifies how often the system reminds you to rotate the service account key.

      6. Click Save.

    4. From the Access node list, select an existing access node or add a new access node.

      Note

      This option is only available when you configure access nodes as Use your access nodes for backups.

  2. Click Next.

    The Cloud database instance details page appears.

Instance Details

Specify the settings for the cloud database instance.

  1. From the Instance name list, select a name.

  2. Under Connection details, from the Credential list, select an existing credential or add a new one. To add a new credential, do the following:

    Steps to add a new database credential
    1. From the Account type list, select a database account.

    2. From the Database credential type, select the database type.

    3. From the Credential vault list, select a credential vault.

    4. In the Credential name box, enter the name of the credential.

    5. If you do not move the Use GCP service account toggle key to right, enter both Username and Password details.

    6. If you move the Use GCP service account toggle key, you only have to enter the Password detail.

    7. The Use SSL options toggle key is unselected by default. By moving the toggle key to right, you can perform the following actions:

      - In the SSL CA file field, provide the SSL CA file path on the proxy computer.

      - In the SSL Cert file field, provide the SSL certificate file path on the proxy computer.

      - In the SSL Key file field, provide the SSL key file path on the proxy computer.

    8. In the Description box, enter the details of the credential.

    9. From the Key Rotation Reminder Interval list, Specifies how often the system reminds you to rotate the service account key.

    10. Click Save.

  3. In the Maintenance DB box, enter the database.

  4. In the Endpoint box, enter the name of the endpoint to connect to the database instance.

  5. Click Next.

    The Backup content page appears.

Backup Content

All the database in the instance and the AlloyDB PostgreSQL instance will be backed up.

Summary

  1. Review the summary, and then click Finish.
×

Loading...