Securing Cloud SQL - dteck/Mediawiki-GCP-CR GitHub Wiki

Getting Started

Before we move on to editing our LocalSetting.php file we want to go back and secure our Cloud SQL server by removing public access to it. Past this point we will be able to route all of our connections though the Unix Socket that Google creates for us.

Navigate to Cloud SQL

On the top left of the screen there are three horizontal white lines. This is generally known as a "Hamburger" menu. Clicking on this will fly out a list of Google Cloud Resources that you can set up inside of your project. To start we will want to set up a SQL server. So we need to scroll down this list until we find the “Databases” section and the item “SQL”.

Deleting the Authorized Networks

Once you open the detail pages for your Cloud SQL instance you will want to go to the Connections tab on the left hand menu. this will bring up the page showing connection options and authorized networks. From here you want to go down the 0.0.0.0/0 network and on the right hand side click the Trash Can icon to remove it from the list of authorized networks. After this simply save your changes and now the Cloud SQL server cannot be accessed by any outside connections.

Next Steps

Modifying and Uploading Wiki Configuration Files