Connect to Cloud SQL for MySQL from Compute Engine

Go

On the Compute Engine VM instance in the open terminal, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_CONNECTION_NAME with your instance's Connection name that appears on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

export INSTANCE_CONNECTION_NAME='INSTANCE_CONNECTION_NAME'
export DB_PORT='3306'
export DB_NAME='quickstart_db'
export DB_USER='quickstart-user'
export DB_PASS='YOUR_DB_PASSWORD'

On the Compute Engine VM instance in the open terminal, run the following commands to get the Go sample app's dependencies on to your Compute Engine VM instance and run the sample app.

1. Get the dependencies required to run to sample app.

   go get ./...

2. Run the sample app.

   go run cmd/app/main.go

On your local computer get the Compute Engine VM instance's external IP address where the sample app is running and view it in a browser.

1. In a terminal or in Powershell on your local computer, get the Compute Engine VM instance's external IP address by running the following gcloud compute instances describe command:

gcloud compute instances describe quickstart-vm-instance --format="value(networkInterfaces[0].accessConfigs[].natIP)"

2. View the running sample app. Open a browser on your local computer and go to the Compute Engine VM instance's external IP address and port :8080.

   http://COMPUTE_ENGINE_VM_EXTERNAL_IP_ADDRESS:8080

   

To stop the sample app, press Control+C in the Compute Engine VM instance terminal where you started the sample app.

Java

On the Compute Engine VM instance in the open terminal, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_CONNECTION_NAME with your instance's Connection name that appears on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

export INSTANCE_CONNECTION_NAME='INSTANCE_CONNECTION_NAME'
export DB_PORT='3306'
export DB_NAME='quickstart_db'
export DB_USER='quickstart-user'
export DB_PASS='YOUR_DB_PASSWORD'

On the Compute Engine VM instance in the open terminal, run the following command to get the Java sample app's dependencies on to your Compute Engine VM instance and run the sample app.

mvn jetty:run

On your local computer get the Compute Engine VM instance's external IP address where the sample app is running and view it in a browser.

1. In a terminal or in Powershell on your local computer, get the Compute Engine VM instance's external IP address by running the following gcloud compute instances describe command:

gcloud compute instances describe quickstart-vm-instance --format="value(networkInterfaces[0].accessConfigs[].natIP)"

2. View the running sample app. Open a browser on your local computer and go to the Compute Engine VM instance's external IP address and port :8080.

   http://COMPUTE_ENGINE_VM_EXTERNAL_IP_ADDRESS:8080

   

To stop the sample app, press Control+C in the Compute Engine VM instance terminal where you started the sample app.

Node.js

1. On the Compute Engine VM instance in the open terminal, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacement:

   • YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

   export INSTANCE_HOST='127.0.0.1'
   export DB_PORT='3306'
   export DB_NAME='quickstart_db'
   export DB_USER='quickstart-user'
   export DB_PASS='YOUR_DB_PASSWORD'

2. Download the Cloud SQL Auth Proxy.

   curl -o cloud-sql-proxy \
   https://storage.googleapis.com/cloud-sql-connectors/cloud-sql-proxy/v2.0.0/cloud-sql-proxy.linux.amd64

3. Set permissions to make the Cloud SQL Auth Proxy file executable.

   chmod +x cloud-sql-proxy

4. Run the Cloud SQL Auth Proxy as a background process. Replace INSTANCE_CONNECTION_NAME with your instance's Connection name that appears on the Cloud SQL instances page in the Google Cloud console.

   ./cloud-sql-proxy INSTANCE_CONNECTION_NAME &

On the Compute Engine VM instance in the open terminal, run the following commands to get the required Node.js packages on to your Compute Engine VM instance and run the sample app.

1. Install the Node.js packages necessary to run the app locally.

   npm install

2. Run the sample app.

   npm start

On your local computer get the Compute Engine VM instance's external IP address where the sample app is running and view it in a browser.

1. In a terminal or in Powershell on your local computer, get the Compute Engine VM instance's external IP address by running the following gcloud compute instances describe command:

gcloud compute instances describe quickstart-vm-instance --format="value(networkInterfaces[0].accessConfigs[].natIP)"

2. View the running sample app. Open a browser on your local computer and go to the Compute Engine VM instance's external IP address and port :8080.

   http://COMPUTE_ENGINE_VM_EXTERNAL_IP_ADDRESS:8080

   

To stop the sample app, press Control+C in the Compute Engine VM instance terminal where you started the sample app.

Python

On the Compute Engine VM instance in the open terminal, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_CONNECTION_NAME with your instance's Connection name that appears on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

export INSTANCE_CONNECTION_NAME='INSTANCE_CONNECTION_NAME'
export DB_PORT='3306'
export DB_NAME='quickstart_db'
export DB_USER='quickstart-user'
export DB_PASS='YOUR_DB_PASSWORD'

On the Compute Engine VM instance in the open terminal, run the following commands to get the Python sample app's requirements on to your Compute Engine VM instance and run the sample app.

1. Initialize a virtual environment and install the requirements to run to sample app.

   python3 -m venv env
   source env/bin/activate
   pip install -r requirements.txt

2. Run the sample app.

   python app.py

On your local computer, set up port forwarding over SSH by performing the instructions in next quickstart step. This enables you to use a browser on your local computer to view the app running on your Compute Engine VM instance.

1. In a terminal or in Powershell on your local computer, run the following gcloud compute ssh command to setup port forwarding over SSH. Before running the command, replace YOUR_PROJECT_ID with your project ID.

gcloud compute ssh quickstart-vm-instance --project=YOUR_PROJECT_ID --zone=us-central1-a --ssh-flag='-L 8000:127.0.0.1:8080'

2. View the running sample app. With port forwarding actively running, open a browser on your local computer and enter http://127.0.0.1:8000 in the address bar of your browser..

   

To stop the sample app, press Control+C in the Compute Engine VM instance terminal where you started the sample app.

Go

On the Compute Engine VM instance in the open Powershell window, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_CONNECTION_NAME with your instance's Connection name that appears on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

$env:INSTANCE_CONNECTION_NAME="INSTANCE_CONNECTION_NAME"
$env:DB_PORT="3306"
$env:DB_NAME="quickstart_db"
$env:DB_USER="quickstart-user"
$env:DB_PASS="YOUR_DB_PASSWORD"

On the Compute Engine VM instance in the open Powershell window, run the following commands to get the Go sample app's dependencies on to your Compute Engine VM instance and run the sample app.

1. Get the dependencies required to run to sample app.

   go get ./...

2. Run the sample app.

   go run cmd\app\main.go

3. View the running sample app. Open a browser on the Compute Engine VM instance and go to http://127.0.0.1:8080.

   

To stop the sample app, press Control+C in the Compute Engine VM instance Powershell window where you started the sample app.

Java

On the Compute Engine VM instance in the open Powershell window, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_CONNECTION_NAME with your instance's Connection name that appears on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

$env:INSTANCE_CONNECTION_NAME="INSTANCE_CONNECTION_NAME"
$env:DB_PORT="3306"
$env:DB_NAME="quickstart_db"
$env:DB_USER="quickstart-user"
$env:DB_PASS="YOUR_DB_PASSWORD"

1. On the Compute Engine VM instance in the open Powershell window, run the following command to get the Java sample app's dependencies on to your Compute Engine VM instance and run the sample app.

   mvn jetty:run

2. View the running sample app. Open a browser on the Compute Engine VM instance and go to http://127.0.0.1:8080.

   

To stop the sample app, press Control+C in the Compute Engine VM instance Powershell window where you started the sample app.

Node.js

1. On the Compute Engine VM instance in the open Powershell window, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacement:

   • YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

   $env:INSTANCE_HOST="127.0.0.1"
   $env:DB_PORT="3306"
   $env:DB_NAME="quickstart_db"
   $env:DB_USER="quickstart-user"
   $env:DB_PASS="YOUR_DB_PASSWORD"

2. Download the Cloud SQL Auth Proxy.

   wget https://storage.googleapis.com/cloud-sql-connectors/cloud-sql-proxy/v2.0.0/cloud-sql-proxy.x64.exe `
   -O cloud-sql-proxy.exe

3. Run the Cloud SQL Auth Proxy as a background process. Replace INSTANCE_CONNECTION_NAME with your instance's Connection name that appears on the Cloud SQL instances page in the Google Cloud console.

   Start-Process -filepath  ".\cloud-sql-proxy.exe" -ArgumentList `
   "INSTANCE_CONNECTION_NAME"

On the Compute Engine VM instance in the open Powershell window, run the following commands to get the required Node.js packages on to your Compute Engine VM instance and run the sample app.

1. Install the Node.js packages necessary to run the app locally.

   npm install

2. Run the sample app.

   npm start

3. View the running sample app. Open a browser on the Compute Engine VM instance and go to http://127.0.0.1:8080.

   

To stop the sample app, press Control+C in the Compute Engine VM instance Powershell window where you started the sample app.

Python

On the Compute Engine VM instance in the open Powershell window, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_CONNECTION_NAME with your instance's Connection name that appears on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

$env:INSTANCE_CONNECTION_NAME="INSTANCE_CONNECTION_NAME"
$env:DB_PORT="3306"
$env:DB_NAME="quickstart_db"
$env:DB_USER="quickstart-user"
$env:DB_PASS="YOUR_DB_PASSWORD"

On the Compute Engine VM instance in the open Powershell window, run the following commands to get the Python sample app's requirements on to your Compute Engine VM instance and run the sample app.

1. Initialize a virtual environment and install the requirements to run to sample app.

   virtualenv --python python3 env
   .\env\Scripts\activate
   pip install -r requirements.txt

2. Run the sample app.

   python app.py

3. View the running sample app. Open a browser on the Compute Engine VM instance and go to http://127.0.0.1:8080.

   

To stop the sample app, press Control+C in the Compute Engine VM instance Powershell window where you started the sample app.

Console

In a browser on your local computer, create a Cloud Storage bucket and upload SSL certificates to the bucket where they can then be accessed from the Compute Engine VM instance.

1. Create a Cloud Storage bucket.
1. For Name of your bucket, enter the following name. Replace YOUR_PROJECT_ID with your project ID:

   YOUR_PROJECT_ID-quickstart-certs

2. Click the Create button to create the bucket.
2. Click the Upload Files button to upload files to the newly created Cloud Storage bucket.
3. Select the following files to be uploaded from your local computer to Cloud Storage:
• server-ca.pem
• client-cert.pem
• client-key.pem

gcloud

On your local computer in a terminal or Powershell window open to the directory where you downloaded the SSL certificates, you can now create a Cloud Storage bucket and upload the SSL certificates to bucket where they can then be accessed from the Compute Engine VM instance. The gcloud CLI will be used to upload the files.

1. Run the following gcloud storage buckets create command to make a new Cloud Storage bucket:

gcloud storage buckets create gs://YOUR_PROJECT_ID-quickstart-certs --location=us-central1

2. From the directory where you downloaded the certificates on your local computer, run the following gcloud storage cp commands to copy the SSL certificates to the newly created Cloud Storage bucket:

gcloud storage cp server-ca.pem gs://YOUR_PROJECT_ID-quickstart-certs/
gcloud storage cp client-cert.pem gs://YOUR_PROJECT_ID-quickstart-certs/
gcloud storage cp client-key.pem gs://YOUR_PROJECT_ID-quickstart-certs/

Go

Download SSL certificates using the gcloud CLI on the Compute Engine VM instance

On the Compute Engine VM instance in a terminal open to the golang-samples/cloudsql/mysql/database-sql directory, run the following gcloud storage cp commands to download the SSL certificates from Cloud Storage to the certs directory.

gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/server-ca.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-cert.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-key.pem certs/.

Set Environment Variables on the Compute Engine VM instance

On the Compute Engine VM instance in the open terminal, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_HOST set to the Private IP address of your instance displayed on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

export INSTANCE_HOST='INSTANCE_HOST'
export DB_PORT='3306'
export DB_NAME='quickstart_db'
export DB_USER='quickstart-user'
export DB_PASS='YOUR_DB_PASSWORD'
export DB_ROOT_CERT='certs/server-ca.pem'
export DB_CERT='certs/client-cert.pem'
export DB_KEY='certs/client-key.pem'
export PRIVATE_IP='TRUE'

On the Compute Engine VM instance in the open terminal, run the following commands to get the Go sample app's dependencies on to your Compute Engine VM instance and run the sample app.

1. Get the dependencies required to run to sample app.

   go get ./...

2. Run the sample app.

   go run cmd/app/main.go

On your local computer get the Compute Engine VM instance's external IP address where the sample app is running and view it in a browser.

1. In a terminal or in Powershell on your local computer, get the Compute Engine VM instance's external IP address by running the following gcloud compute instances describe command:

gcloud compute instances describe quickstart-vm-instance --format="value(networkInterfaces[0].accessConfigs[].natIP)"

2. View the running sample app. Open a browser on your local computer and go to the Compute Engine VM instance's external IP address and port :8080.

   http://COMPUTE_ENGINE_VM_EXTERNAL_IP_ADDRESS:8080

   

To stop the sample app, press Control+C in the Compute Engine VM instance terminal where you started the sample app.

Java

Download SSL certificates using the gcloud CLI on the Compute Engine VM instance

On the Compute Engine VM instance in a terminal open to the java-docs-samples/cloud-sql/mysql/servlet directory, run the following gcloud storage cp commands to download the SSL certificates from Cloud Storage to the current directory.

gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/server-ca.pem .
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-cert.pem .
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-key.pem .

Configure the SSL certificates for use in Java on the Compute Engine VM instance

1. In the terminal on the Compute Engine VM instance, run the following command to import the server certificate into a custom Java truststore using keytool. Before running the following command, replace TRUST_CERT_KEYSTORE_PASSWD with your own custom keystore password to be used to create the Java truststore.

keytool -importcert -alias MySQLCACert -file server-ca.pem \
-keystore quickstart-truststore -storepass TRUST_CERT_KEYSTORE_PASSWD

2. Run the following commands in the Compute Engine VM instance terminal to import the client certificate and key into a custom Java keystore using openssl and keytool. Before running the following commands, replace CLIENT_CERT_KEYSTORE_PASSWD with your own custom client keystore password to be used to create the Java client keystore.

Convert the client key and certificate files to a PKCS #12 archive:

openssl pkcs12 -export -in client-cert.pem -inkey client-key.pem \
-name "mysqlclient" -passout pass:CLIENT_CERT_KEYSTORE_PASSWD \
-out client-keystore.p12

Import the client key and certificate into a Java keystore:

keytool -importkeystore -srckeystore client-keystore.p12 -srcstoretype pkcs12 \
-srcstorepass CLIENT_CERT_KEYSTORE_PASSWD -destkeystore quickstart-keystore \
-deststoretype JKS -deststorepass CLIENT_CERT_KEYSTORE_PASSWD

Set Environment Variables on the Compute Engine VM instance

On the Compute Engine VM instance in the open terminal, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_HOST set to the Private IP address of your instance displayed on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

export INSTANCE_HOST='INSTANCE_HOST'
export DB_PORT='3306'
export DB_NAME='quickstart_db'
export DB_USER='quickstart-user'
export DB_PASS='YOUR_DB_PASSWORD'
export TRUST_CERT_KEYSTORE_PATH='quickstart-truststore'
export TRUST_CERT_KEYSTORE_PASSWD='TRUST_CERT_KEYSTORE_PASSWD'
export CLIENT_CERT_KEYSTORE_PATH='quickstart-keystore'
export CLIENT_CERT_KEYSTORE_PASSWD='CLIENT_CERT_KEYSTORE_PASSWD'
export PRIVATE_IP='TRUE'

On the Compute Engine VM instance in the open terminal, run the following command to get the Java sample app's dependencies on to your Compute Engine VM instance and run the sample app.

mvn jetty:run

On your local computer get the Compute Engine VM instance's external IP address where the sample app is running and view it in a browser.

1. In a terminal or in Powershell on your local computer, get the Compute Engine VM instance's external IP address by running the following gcloud compute instances describe command:

gcloud compute instances describe quickstart-vm-instance --format="value(networkInterfaces[0].accessConfigs[].natIP)"

2. View the running sample app. Open a browser on your local computer and go to the Compute Engine VM instance's external IP address and port :8080.

   http://COMPUTE_ENGINE_VM_EXTERNAL_IP_ADDRESS:8080

   

To stop the sample app, press Control+C in the Compute Engine VM instance terminal where you started the sample app.

Node.js

Download SSL certificates using the gcloud CLI on the Compute Engine VM instance

On the Compute Engine VM instance in a terminal open to the nodejs-docs-samples/cloud-sql/mysql/mysql directory, run the following gcloud storage cp commands to download the SSL certificates from Cloud Storage to the certs directory.

gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/server-ca.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-cert.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-key.pem certs/.

Set Environment Variables on the Compute Engine VM instance

On the Compute Engine VM instance in the open terminal, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_HOST set to the Private IP address of your instance displayed on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

export INSTANCE_HOST='INSTANCE_HOST'
export DB_PORT='3306'
export DB_NAME='quickstart_db'
export DB_USER='quickstart-user'
export DB_PASS='YOUR_DB_PASSWORD'
export DB_ROOT_CERT='certs/server-ca.pem'
export DB_CERT='certs/client-cert.pem'
export DB_KEY='certs/client-key.pem'
export PRIVATE_IP='TRUE'

On the Compute Engine VM instance in the open terminal, run the following commands to get the required Node.js packages on to your Compute Engine VM instance and run the sample app.

1. Install the Node.js packages necessary to run the app locally.

   npm install

2. Run the sample app.

   npm start

On your local computer get the Compute Engine VM instance's external IP address where the sample app is running and view it in a browser.

1. In a terminal or in Powershell on your local computer, get the Compute Engine VM instance's external IP address by running the following gcloud compute instances describe command:

gcloud compute instances describe quickstart-vm-instance --format="value(networkInterfaces[0].accessConfigs[].natIP)"

2. View the running sample app. Open a browser on your local computer and go to the Compute Engine VM instance's external IP address and port :8080.

   http://COMPUTE_ENGINE_VM_EXTERNAL_IP_ADDRESS:8080

   

To stop the sample app, press Control+C in the Compute Engine VM instance terminal where you started the sample app.

Python

Download SSL certificates using the gcloud CLI on the Compute Engine VM instance

On the Compute Engine VM instance in a terminal open to the python-docs-samples/cloud-sql/mysql/sqlalchemy directory, run the following gcloud storage cp commands to download the SSL certificates from Cloud Storage to the certs directory.

gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/server-ca.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-cert.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-key.pem certs/.

Set Environment Variables on the Compute Engine VM instance

On the Compute Engine VM instance in the open terminal, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_HOST set to the Private IP address of your instance displayed on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

export INSTANCE_HOST='INSTANCE_HOST'
export DB_PORT='3306'
export DB_NAME='quickstart_db'
export DB_USER='quickstart-user'
export DB_PASS='YOUR_DB_PASSWORD'
export DB_ROOT_CERT='certs/server-ca.pem'
export DB_CERT='certs/client-cert.pem'
export DB_KEY='certs/client-key.pem'
export PRIVATE_IP='TRUE'

On the Compute Engine VM instance in the open terminal, run the following commands to get the Python sample app's requirements on to your Compute Engine VM instance and run the sample app.

1. Initialize a virtual environment and install the requirements to run to sample app.

   python3 -m venv env
   source env/bin/activate
   pip install -r requirements.txt

2. Run the sample app.

   python app.py

On your local computer set up port forwarding over SSH by performing the instructions in next quickstart step. This enables you to use a browser on your local computer to view the app running on your Compute Engine VM instance.

1. In a terminal or in Powershell on your local computer, run the following gcloud compute ssh command to setup port forwarding over SSH. Before running the command, replace YOUR_PROJECT_ID with your project ID.

gcloud compute ssh quickstart-vm-instance --project=YOUR_PROJECT_ID --zone=us-central1-a --ssh-flag='-L 8000:127.0.0.1:8080'

2. View the running sample app. With port forwarding actively running, open a browser on your local computer and enter http://127.0.0.1:8000 in the address bar of your browser.

   

To stop the sample app, press Control+C in the Compute Engine VM instance terminal where you started the sample app.

Console

In a browser on your local computer, create a Cloud Storage bucket and upload SSL certificates to the bucket where they can then be accessed from the Compute Engine VM instance.

1. Create a Cloud Storage bucket.
1. For Name of your bucket, enter the following name. Replace YOUR_PROJECT_ID with your project ID:

   YOUR_PROJECT_ID-quickstart-certs

2. Click the Create button to create the bucket.
2. Click the Upload Files button to upload files to the newly created Cloud Storage bucket.
3. Select the following files to be uploaded from your local computer to Cloud Storage:
• server-ca.pem
• client-cert.pem
• client-key.pem

gcloud

On your local computer in a terminal or Powershell window open to the directory where you downloaded the SSL certificates, you can now create a Cloud Storage bucket and upload the SSL certificates to bucket where they can then be accessed from the Compute Engine VM instance. The gcloud CLI will be used to upload the files.

1. Run the following gcloud storage buckets create command to make a new Cloud Storage bucket:

gcloud storage buckets create gs://YOUR_PROJECT_ID-quickstart-certs --location=us-central1

2. From the directory where you downloaded the certificates on your local computer, run the following gcloud storage cp commands to copy the SSL certificates to the newly created Cloud Storage bucket:

gcloud storage cp server-ca.pem gs://YOUR_PROJECT_ID-quickstart-certs/
gcloud storage cp client-cert.pem gs://YOUR_PROJECT_ID-quickstart-certs/
gcloud storage cp client-key.pem gs://YOUR_PROJECT_ID-quickstart-certs/

Go

Download SSL certificates using the gcloud CLI on the Compute Engine VM instance

On the Compute Engine VM instance in a Powershell window open to the golang-samples/cloudsql/mysql/database-sql directory, run the following gcloud storage cp commands to download the SSL certificates from Cloud Storage to the certs directory.

gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/server-ca.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-cert.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-key.pem certs/.

Set Environment Variables on the Compute Engine VM instance

On the Compute Engine VM instance in the Powershell window, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_HOST set to the Private IP address of your instance displayed on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

$env:INSTANCE_HOST="INSTANCE_HOST"
$env:DB_PORT="3306"
$env:DB_NAME="quickstart_db"
$env:DB_USER="quickstart-user"
$env:DB_PASS="YOUR_DB_PASSWORD"
$env:DB_ROOT_CERT="certs/server-ca.pem"
$env:DB_CERT="certs/client-cert.pem"
$env:DB_KEY="certs/client-key.pem"
$env:PRIVATE_IP="TRUE"

On the Compute Engine VM instance in the open Powershell window, run the following commands to get the Go sample app's dependencies on to your Compute Engine VM instance and run the sample app.

1. Get the dependencies required to run to sample app.

   go get ./...

2. Run the sample app.

   go run cmd\app\main.go

3. View the running sample app. Open a browser on the Compute Engine VM instance and go to http://127.0.0.1:8080.

   

To stop the sample app, press Control+C in the Compute Engine VM instance Powershell window where you started the sample app.

Java

Download SSL certificates using the gcloud CLI on the Compute Engine VM instance

On the Compute Engine VM instance in a Powershell window open to the java-docs-samples/cloud-sql/mysql/servlet directory, run the following gcloud storage cp commands to download the SSL certificates from Cloud Storage to the current directory.

gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/server-ca.pem .
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-cert.pem .
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-key.pem .

Configure the SSL certificates for use in Java on the Compute Engine VM instance

1. In Powershell on the Compute Engine VM instance, run the following command to import the server certificate into a custom Java truststore using keytool. Before running the following command, replace TRUST_CERT_KEYSTORE_PASSWD with your own custom keystore password to be used to create the Java truststore.

keytool -importcert -alias MySQLCACert -file server-ca.pem `
-keystore quickstart-truststore -storepass TRUST_CERT_KEYSTORE_PASSWD

2. Run the following commands in the Compute Engine VM instance Powershell window to import the client certificate and key into a custom Java keystore using openssl and keytool. Before running the following commands, replace CLIENT_CERT_KEYSTORE_PASSWD with your own custom client keystore password to be used to create the Java client keystore.

Convert the client key and certificate files to a PKCS #12 archive:

openssl pkcs12 -export -in client-cert.pem -inkey client-key.pem `
-name "mysqlclient" -passout pass:CLIENT_CERT_KEYSTORE_PASSWD `
-out client-keystore.p12

Import the client key and certificate into a Java keystore:

keytool -importkeystore -srckeystore client-keystore.p12 -srcstoretype pkcs12 `
-srcstorepass CLIENT_CERT_KEYSTORE_PASSWD -destkeystore quickstart-keystore `
-deststoretype JKS -deststorepass CLIENT_CERT_KEYSTORE_PASSWD

Set Environment Variables on the Compute Engine VM instance

On the Compute Engine VM instance in the Powershell window, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_HOST set to the Private IP address of your instance displayed on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

$env:INSTANCE_HOST="INSTANCE_HOST"
$env:DB_PORT="3306"
$env:DB_NAME="quickstart_db"
$env:DB_USER="quickstart-user"
$env:DB_PASS="YOUR_DB_PASSWORD"
$env:TRUST_CERT_KEYSTORE_PATH="quickstart-truststore"
$env:TRUST_CERT_KEYSTORE_PASSWD="TRUST_CERT_KEYSTORE_PASSWD"
$env:CLIENT_CERT_KEYSTORE_PATH="quickstart-keystore"
$env:CLIENT_CERT_KEYSTORE_PASSWD="CLIENT_CERT_KEYSTORE_PASSWD"
$env:PRIVATE_IP="TRUE"

1. On the Compute Engine VM instance in the open Powershell window, run the following command to get the Java sample app's dependencies on to your Compute Engine VM instance and run the sample app.

   mvn jetty:run

2. View the running sample app. Open a browser on the Compute Engine VM instance and go to http://127.0.0.1:8080.

   

To stop the sample app, press Control+C in the Compute Engine VM instance Powershell window where you started the sample app.

Node.js

Download SSL certificates using the gcloud CLI on the Compute Engine VM instance

On the Compute Engine VM instance in a Powershell window open to the nodejs-docs-samples/cloud-sql/mysql/mysql directory, run the following gcloud storage cp commands to download the SSL certificates from Cloud Storage to the certs directory.

gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/server-ca.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-cert.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-key.pem certs/.

Set Environment Variables on the Compute Engine VM instance

On the Compute Engine VM instance in the Powershell window, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_HOST set to the Private IP address of your instance displayed on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

$env:INSTANCE_HOST="INSTANCE_HOST"
$env:DB_PORT="3306"
$env:DB_NAME="quickstart_db"
$env:DB_USER="quickstart-user"
$env:DB_PASS="YOUR_DB_PASSWORD"
$env:DB_ROOT_CERT="certs/server-ca.pem"
$env:DB_CERT="certs/client-cert.pem"
$env:DB_KEY="certs/client-key.pem"
$env:PRIVATE_IP="TRUE"

On the Compute Engine VM instance in the open Powershell window, run the following commands to get the required Node.js packages on to your Compute Engine VM instance and run the sample app.

1. Install the Node.js packages necessary to run the app locally.

   npm install

2. Run the sample app.

   npm start

3. View the running sample app. Open a browser on the Compute Engine VM instance and go to http://127.0.0.1:8080.

   

To stop the sample app, press Control+C in the Compute Engine VM instance Powershell window where you started the sample app.

Python

Download SSL certificates using the gcloud CLI on the Compute Engine VM instance

On the Compute Engine VM instance in a Powershell window open to the python-docs-samples/cloud-sql/mysql/sqlalchemy directory, run the following gcloud storage cp commands to download the SSL certificates from Cloud Storage to the certs directory.

gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/server-ca.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-cert.pem certs/.
gcloud storage cp gs://YOUR_PROJECT_ID-quickstart-certs/client-key.pem certs/.

Set Environment Variables on the Compute Engine VM instance

On the Compute Engine VM instance in the Powershell window, run the following commands to initialize environment variables required to run the sample app. Before running the commands, make the following replacements:

• INSTANCE_HOST set to the Private IP address of your instance displayed on the Cloud SQL instances page in the Google Cloud console.
• YOUR_DB_PASSWORD with the password of the quickstart-user that you created in the previous Create a user quickstart step.

$env:INSTANCE_HOST="INSTANCE_HOST"
$env:DB_PORT="3306"
$env:DB_NAME="quickstart_db"
$env:DB_USER="quickstart-user"
$env:DB_PASS="YOUR_DB_PASSWORD"
$env:DB_ROOT_CERT="certs/server-ca.pem"
$env:DB_CERT="certs/client-cert.pem"
$env:DB_KEY="certs/client-key.pem"
$env:PRIVATE_IP="TRUE"

On the Compute Engine VM instance in the open Powershell window, run the following commands to get the Python sample app's requirements on to your Compute Engine VM instance and run the sample app.

1. Initialize a virtual environment and install the requirements to run to sample app.

   virtualenv --python python3 env
   .\env\Scripts\activate
   pip install -r requirements.txt

2. Run the sample app.

   python app.py

3. View the running sample app. Open a browser on the Compute Engine VM instance and go to http://127.0.0.1:8080.

   

To stop the sample app, press Control+C in the Compute Engine VM instance Powershell window where you started the sample app.