Question

Your team is deploying a Cloud SQL instance that must be reachable only over private IP from Compute Engine VMs in your custom-mode VPC. During setup, the Cloud SQL private IP configuration fails, reporting that no allocated IP range exists for the service producer connection. What must you configure to enable private connectivity to the managed Cloud SQL service?

Accepted Answer

Reserve an allocated internal IP range in the VPC and create a private services access connection (VPC peering) to the Google service producer network.

Answer

Enable Private Google Access on the subnet where the Compute Engine VMs are located.

Answer

Create a Private Service Connect endpoint targeting the Cloud SQL Admin API bundle.

Answer

Add a custom static route to 199.36.153.8/30 pointing to the default internet gateway.