Using Hasura Cloud with a GCP Postgres Database

Available on: Cloud

Introduction

This guide explains how to connect a new or existing GCP Postgres database to a Hasura Cloud project. If you're exploring GCP Postgres and are interested in migrating an existing Postgres database - such as from Heroku - check out their docs before continuing below.

Step 1: Sign up or log in to Hasura Cloud

Navigate to Hasura Cloud and sign up or log in.

Step 2: Create a Hasura Cloud project

On the Hasura Cloud dashboard, create a new project:

After the project is initialized successfully, click on Launch console to open the Hasura console in your browser.

On the Hasura console, navigate to Data -> Manage -> Connect Database -> Connect existing database:

You will get prompted for a Postgres Database URL. We will create this in the next step and then come back here.

Step 3: Create a Postgres DB on GCP (skip if you have an existing DB)

Log into the GCP console.

On the left-side navigation, scroll down to Storage and click on SQL:

On the top, click on Create instance:

Select Postgres:

Select an instance ID, as well as a default user password. If required, choose a specific region and zone.

Then click Create.

Step 4: Allow connections to your DB from Hasura Cloud

On the dashboard of your GCP database instance, on the left sidebar, click on Connections. Then scroll down to the checkbox Public IP, and click + Add network:

You can choose an optional name (e.g. "Hasura").

Copy the IP address from the copy icon in the Hasura Cloud IP field on the project's details view on Hasura Cloud.

Enter the Hasura IP address that you copied:

Then click Save.

Note

If you're using a database user other than the default one, make sure to give it the right Postgres permissions.

Step 5: Construct the database connection URL

The structure of the database connection URL looks as follows:

postgresql://<user-name>:<password>@<public-ip>:<postgres-port>/

• user-name: If you have a separate database user, the user name will be their name. If you didn't specify a user, the default user name is postgres.
• password: If you have a separate database user, use their password. Otherwise, use the password that you chose when creating the database.
• public-ip: The public IP can be optained by clicking on Overview on the left-side navigation and then scrolling down to Connect to this instance:

• postgres-port: The default port for Postgres is 5432 if not specified otherwise.
• db: The DB is postgres by default unless otherwise specified.

Step 6: Finish connecting the database

Back on Hasura Console, enter the database URL that we retrieved in step 5:

Then click Connect Database.

Note

For security reasons, it is recommended to set database URLs as env vars and using the env vars to connect to the databases in place of the raw database URLs.

Voilà. You are ready to start developing.

Step 7 (optional): Enable SSL connection

Step 7.1 Get GCP SSL Certs

Google Cloud (GCP) SQL makes the following SSL/TLS certificates available for download:

• A server certificate saved as server-ca.pem
• A client public key certificate saved as client-cert.pem
• A client private key saved as client-key.pem

Note Please refer to the

Google Cloud Documentation for detailed information about the different certs.

Download these certs to your local drive.

Step 7.2: Add env vars

Log in to Hasura Cloud, go to your project and add the following env vars:

(Open the cert files using your favourite text editor, select all the contents and copy them to the clipboard)

Env Var Name	Value
SSL_ROOTCERT_GCP	Contents from server-ca.pem
SSL_CERT_GCP	Contents from client-cert.pem
SSL_KEY_GCP	Contents from client-key.pem

Here is how your Hasura Cloud env vars setup should look like:

Step 7.3: Configure SSL settings

Open the console of your Hasura Cloud project, go to the Data -> Manage -> [db-name] -> Edit page.

Under Connection Settings add the following SSL certificate settings:

Field Name	Value
SSL Mode	verify-ca (select from dropdown)
SSL Root Certificate	SSL_ROOTCERT_GCP
SSL Certificate	SSL_CERT_GCP
SSL Key	SSL_KEY_GCP

Here is how the setup should look like:

Finally, click on the Update Connection button to apply the SSL settings.

Next steps

You can check out our 30-Minute Hasura Basics Course and other GraphQL & Hasura Courses for a more detailed introduction to Hasura.

You can also click the gear icon to manage your Hasura Cloud project. (e.g. add collaborators, env vars or custom domains).

Note

For more information on which Postgres features we support, check out this page!