Re: [kubernetes-users] Getting Google's Cloud SQL Proxy to work

2017-06-28 Thread Evan Jones
I believe we only grant the service account the "Cloud SQL Client" role. I'm just a user of CloudSQL, but my understanding of the advantage of using the proxy is that it lets you control access via Google Cloud roles. Without it, you are trusting everything that uses some set of IP addresses with

Re: [kubernetes-users] Getting Google's Cloud SQL Proxy to work

2017-06-28 Thread Traiano Welcome
On Thursday, 22 June 2017 18:16:22 UTC+4, Evan Jones wrote: > > The Cloud SQL Proxy logs suggest to me that it may not be using the right > credentials? It is possible that it is trying to use the cluster's "default > service account"? > > It seems to have been a permissions issue. It started w

Re: [kubernetes-users] Getting Google's Cloud SQL Proxy to work

2017-06-22 Thread Evan Jones
The Cloud SQL Proxy logs suggest to me that it may not be using the right credentials? It is possible that it is trying to use the cluster's "default service account"? If you use "kubectl exec ... -ti /bin/sh" you should be able to examine the contents of the credentials file that is being pass

Re: [kubernetes-users] Getting Google's Cloud SQL Proxy to work

2017-06-22 Thread Traiano Welcome
Hi Evan On Thu, Jun 22, 2017 at 5:34 PM, Evan Jones wrote: > I know nothing about wordpress, but for what it is worth, we are using > this Cloud SQL Proxy container with success. A few notes about the config > you posted: > > > * I'm assuming that where you have > "-instances=[INSTANCE_CONNECT

Re: [kubernetes-users] Getting Google's Cloud SQL Proxy to work

2017-06-22 Thread Evan Jones
I know nothing about wordpress, but for what it is worth, we are using this Cloud SQL Proxy container with success. A few notes about the config you posted: * I'm assuming that where you have "-instances=[INSTANCE_CONNECTION_NAME]=tcp:[PORT]" you've replaced this with your Cloud SQL instance

Re: [kubernetes-users] Getting Google's Cloud SQL Proxy to work

2017-06-22 Thread Traiano Welcome
Hi Ahmet On Thursday, 22 June 2017 02:25:05 UTC+4, Ahmet Alp Balkan wrote: > > Can you run "kubectl logs -l app=wordpress"? I am assuming there will be > some logs from the crashing mysql container. > > Thanks for your response. I get no output from running that command (I suppose no logs are be

Re: [kubernetes-users] Getting Google's Cloud SQL Proxy to work

2017-06-21 Thread
Can you run "kubectl logs -l app=wordpress"? I am assuming there will be some logs from the crashing mysql container. On Wed, Jun 21, 2017 at 7:58 AM, Traiano Welcome wrote: > I'm following this example of how to get wordpress running on GKE > connected to Google Cloud SQL via the Google Cloud S

[kubernetes-users] Getting Google's Cloud SQL Proxy to work

2017-06-21 Thread Traiano Welcome
I'm following this example of how to get wordpress running on GKE connected to Google Cloud SQL via the Google Cloud SQL Proxy: https://cloud.google.com/sql/docs/mysql/connect-container-engine Unfortunately, my wordpress po