To back up and restore PostgreSQL data on a Google application, verify that your environment has the required software and a firewall.
Software Requirements
Packages required on access nodes:
Virtual Server Agent
PostgreSQL Agent
Access nodes that you run backup and restore operations on must have one of the following operating systems:
Red Hat Enterprise Linux 8.x
Red Hat Enterprise Linux 7.x
Oracle Linux Enterprise
CentOS 8.x
CentOS 7.x
Windows 2012
Windows 2016
Windows 2019
Note: If you have network configuration enabled on the access nodes, before you deploy a Windows or a Linux proxy, configure a firewall on the cloud proxy and on-premises. For more information, see Configuring a Firewall to Install the Virtual Server Agent on a Cloud VM or Instance.
User Account Requirements
For DumpBasedBackupSet, verify that the PostgreSQL agent has a user account with sufficient privileges to perform the following:
Perform backup and restore operations
Access the PostgreSQL database objects as part of the subclient content
The following table illustrates the necessary privileges the user account should have to perform backup and restore operations:
Operations
Privileges PostgreSQL User Should Have
Backup
CREATEDB, CREATEROLE
Restore
CREATEDB, CREATEROLE, INHERIT, LOGIN
CONNECTION LIMIT, if set, should at least have a value of 2.
Initially, the user account credentials is provided during the instance configuration after the installation of the agent. You can change the user account at the instance level.
If the database instances are configured across Google Cloud projects, create a service account in one project. In other projects that have PostgreSQL database instances, add an IAM principal with Cloud SQL Viewer permission.
For creating a cloud account, use the service account for authentication that will discover PostgreSQL instances in all projects. You must use the same service account that is added as an IAM principal to create a cloud account. Verify that the Google Cloud VM instance has access to the PostgreSQL database instance.
Supported PostgreSQL Versions
From PostgreSQL version 9.2 to version 13.x
SSL and TLS Support
The supported TLS versions to create Google Cloud SSL encrypted PostgreSQL instances are TLS 1.0, 1.1 and 1.2.