Cloud SQL (PostgreSQL) Configure external replicas to VM

If you’re running a PostgreSQL database on Cloud SQL and need a replica for backup or scale-out purposes, you can set up replication to a replica VM using pglogical. In this blog post, we’ll guide you through the necessary steps to set up replication between Cloud SQL with PostgreSQL 14 as your primary and a replica VM running Red Hat Enterprise Linux 7. First, let’s start with the primary (Cloud SQL) side.
Read more →

Generate Let’s Encrypt SSL Certificate without Webserver

We will use acme.sh with Cloudflare DNS API to generate a wildcard SSL Certificate from Let’s Encrypt for our domain. We also will use Cloud Shell free Linux shell virtual machine instance provided by Google Cloud. Note: Make sure that you have already added your domain to Cloudflare. Log in to Google Cloud Console and activate Cloud Shell Install acme.sh bash curl https://get.acme.sh | sh -s [email protected] Setup Cloudflare global API key, but first you need to log in to your Cloudflare account to get your API key.
Read more →

Setup vxlan Network with L2 Connectivity between VMs

This tutorial show you how to create vxlan Network with L2 Connectivity between VMs (Compute Engine) in google cloud Create VPC Network named vxlan-network with custom mode bash gcloud compute networks create vxlan-network \ --project=trial-project-andania \ --subnet-mode=custom Create Subnet on vxlan-network VPC Network bash gcloud compute networks subnets create us-central1-subnet \ --project=trial-project-andania \ --range=10.40.0.0/20 \ --network=vxlan-network \ --region=us-central1 Create firewall rules to allow SSH and icmp for the VMs bash gcloud compute firewall-rules create vxlan-network-allow-ssh-icmp \ --project=trial-project-andania \ --network vxlan-network \ --allow tcp:22,icmp Create two VM instances named vm-a and vm-b.
Read more →

IAM Condition Example GCP

The conditions for allowing only access to compute engines with the name start with dev- with project permissions as editor. Go to the IAM & Admin page. Click the ADD button to Add principals. Type user email address or group to the New principals and for Select a role choose Basic > Editor. Click Add condition to open Condition Editor page, type the Title for example “Allow access only to dev-”, click CONDITION EDITOR tab and paste the following Expression text resource.
Read more →

Change GKE Container Timezone

By default GKE Cluster with container image is using UTC+0 timezone, to change the timezone we need to use k8tz installed to the cluster. You can check the details of k8tz on their github page here https://github.com/k8tz/k8tz This example use GKE Private cluster with Access control plane using its external IP address enable. First open Cloud Shell. Check cloud shell external IP address using this command bash dig +short myip.opendns.com @resolver1.
Read more →