You do not need to include the project ID in the instance name. This is done automatically where appropriate (for example, in the log files).
To see the password in clear text, click the Show password icon.
You can either enter the password manually or click Generate to have Cloud SQL create a password for you automatically.
Place your instance in the same region as the resources that access it. The region you select can't be modified in the future. In most cases, you don't need to specify a zone.
If you are configuring your instance for high availability, you can select both a primary and secondary zone.
The following conditions apply when the secondary zone is used during instance creation:
Any
for the primary zone and Any (different from primary)
for the secondary zone.The following table is a quick reference to instance settings. For more details about each setting, see the instance settings page.
Setting | Notes |
---|---|
Machine type | |
Machine type | Select from Lightweight, Standard (Most common), or High memory. Each machine type is classified by the number of CPUs (cores) and amount of memory for your instance. |
Cores | The number of vCPUs for your instance. Learn more. |
Memory | The amount of memory for your instance, in GBs. Learn more. |
Custom | For the Dedicated core machine type, instead of selecting a predefined configuration, select the Custom button to create an instance with a custom configuration. When you select this option, you need to select the number of cores and amount of memory for your instance. Learn more. |
Storage | |
Storage type | Determines whether your instance uses SSD or HDD storage. Learn more. |
Storage capacity | The amount of storage provisioned for the instance. Learn more. |
Enable automatic storage increases | Determines whether Cloud SQL automatically provides more storage for your instance when free space runs low. Learn more. |
Encryption | |
Google-managed encryption | The default option. |
Customer key-managed encryption key (CMEK) | Select to use your key with Google Cloud Key Management Service. Learn more. |
Connections | |
Private IP | Adds a private IP address for your instance. To enable connecting to the instance, additional configuration is required. Optionally, you can specify an allocated IP range for your instances to use for connections.
Your instance can have both a public and a private IP address.
|
Public IP | Adds a public IP address for your instance. You can then add authorized networks to connect to the instance. Your instance can have both a public and a private IP address. Learn more about using public IP. |
Authorized networks | Add the name for the new network and the Network address. Learn more. |
Data protection | |
Automate backups | The window of time when you would like backups to start. |
Choose where to store your backups | Select Multi-region for most use cases. If you need to store backups in a specific region, for example, if there are regulatory reasons to do so, select Region and select your region from the Location drop-down menu. |
Choose how many automated backups to store | The number of automated backups you would like to retain (from 1 to 365 days). Learn more. |
Enable point-in-time recovery | Enables point-in-time recovery and transaction logging. Learn more. |
Enable deletion protection | Determines whether to protect an instance against accidental deletion. Learn more. |
Enable retained backups after instance deletion | Determines whether automated and on-demand backups are retained after an instance is deleted. Learn more. |
Choose how many days of logs to retain | Configure write-ahead log retention from 1 to 7 days. The default setting is 7 days. Learn more. |
Maintenance | |
Preferred window | Determines a one-hour window when Cloud SQL can perform disruptive maintenance on your instance. If you do not set the window, then disruptive maintenance can be done at any time. Learn more. |
Order of updates | Your preferred timing for instance updates, relative to other instances in the same project. Learn more. |
Flags | |
ADD FLAG | You can use database flags to control settings and parameters for your instance. Learn more. |
Labels | |
ADD LABEL | Add a key and value for each label that you add. You use labels to help organize your instances. |
Note: It might take a few minutes to create your instance. However, you can view information about the instance while it's being created.
For information about installing and getting started with the gcloud CLI, see Installing gcloud CLI. For information about starting Cloud Shell, see the Cloud Shell documentation.
You must use gcloud
version 243.0.0 or later.
gcloud sql instances create
command to create the instance:For Cloud SQL Enterprise Plus edition instances:
gcloudsqlinstancescreateINSTANCE_NAME\--database-version=DATABASE_VERSION\--region=REGION\--tier=TIER\--root-password=ROOT_PASSWORD\--edition=ENTERPRISE_PLUS
For Cloud SQL Enterprise edition instances:
gcloudsqlinstancescreateINSTANCE_NAME\--database-version=DATABASE_VERSION\--region=REGION\--cpu=NUMBER_OF_vCPUs\--memory=MEMORY_SIZE\--root-password=ROOT_PASSWORD\--edition=ENTERPRISE
You do not need to include the project ID in the instance name. This is done automatically where appropriate (for example, in the log files).
The values for vCPUs and memory size are limited for Cloud SQL Enterprise edition. For more information, see Choose between Cloud SQL Enterprise Plus edition and Cloud SQL Enterprise edition.
For example, the following string creates an instance with two vCPUs and 7,680 MB of memory:
gcloudsqlinstancescreatemyinstance\--database-version=SQLSERVER_2017_STANDARD\--region=us-central1\--cpu=2\--memory=7680MB\--root-password=EXAMPLE_PASSWORD\--edition=ENTERPRISE
For some sample values, see Sample machine types.
To learn about the parameters for instance settings, see gcloud sql instances create.
The default value for REGION is us-central1
.
Don't include sensitive or personally identifiable information in your instance name; it is externally visible.
You do not need to include the project ID in the instance name. This is done automatically where appropriate (for example, in the log files).
If you are creating an instance for high availability, you can specify both the primary and secondary zones, using the --zone
and --secondary-zone
parameters. The following conditions apply when the secondary zone is used during instance creation or edit:
You can add more parameters to determine other instance settings:
Setting | Parameter | Notes |
---|---|---|
Required parameters | ||
Database version | --database-version | The database version, which is based on your Cloud SQL edition. |
Region | --region | See valid values. |
Connectivity | ||
Private IP | --network
| --network : Specifies the name of the VPC network you want to use for this instance. Private services access must already be configured for the network. Available only for the beta command (gcloud beta sql instances create ).
|
Public IP | --authorized-networks | For public IP connections, only connections from authorized networks can connect to your instance. Learn more. |
Server CA mode | --server-ca-mode | The
|
Machine type and storage | ||
Machine type | --tier | |
Storage type | --storage-type | Determines whether your instance uses SSD or HDD storage. Learn more. |
Storage capacity | --storage-size | The amount of storage provisioned for the instance, in GB. Learn more. |
Automatic storage increase | --storage-auto-increase | Determines whether Cloud SQL automatically provides more storage for your instance when free space runs low. Learn more. |
Automatic storage increase limit | --storage-auto-increase-limit | Determines how large Cloud SQL can automatically grow storage. Available only for the beta command (gcloud beta sql instances create ). Learn more. |
Automatic backups and high availability | ||
High availability | --availability-type | For a highly-available instance, set to REGIONAL . Learn more. | Secondary zone | --secondary-zone | If you're creating an instance for high availability, you can specify both the primary and secondary zones using the --zone and --secondary-zone parameters . The following restrictions apply when the secondary zone is used during instance creation or edit:
If the primary and secondary zones are specified, they must be distinct zones. If the primary and secondary zones are specified, they must belong to the same region. |
Automatic backups | --backup-start-time | The window of time when you would like backups to start. |
Retention settings for automated backups | --retained-backups-count | The number of automated backups to retain. Learn more. |
Retention settings for transaction logs | --retained-transaction-log-days | The number of days to retain transaction logs for point-in-time recovery. Learn more. |
Point-in-time recovery | --enable-point-in-time-recovery | Enables point-in-time recovery and transaction logs. Learn more. |
Add database flags | ||
Database flags | --database-flags | You can use database flags to control settings and parameters for your instance. Learn more about database flags. |
Maintenance schedule | ||
Maintenance window | --maintenance-window-day , --maintenance-window-hour | Determines a one-hour window when Cloud SQL can perform disruptive maintenance on your instance. If you don't set the window, then disruptive maintenance can be done at any time. Learn more. |
Maintenance timing | --maintenance-release-channel | Your preferred timing for instance updates, relative to other instances in the same project. Use preview for earlier updates, and production for later updates. Learn more. |
Custom SAN | ||
Add a custom subject alternative name (SAN) | --custom-subject-alternative-names=DNS_NAMES | If you want to use a custom DNS name to connect to a Cloud SQL instance instead of using an IP address, then configure the custom subject alternative name (SAN) setting while creating the instance. The custom DNS name that you insert into the custom SAN setting is added to the SAN field of the server certificate of the instance. This lets you use the custom DNS name with hostname validation securely. Before you can use the custom DNS name in your clients and applications, you must set up the mapping between the DNS name and the IP address. This is known as DNS resolution. You can add a comma-separated list of up to three custom DNS names to the custom SAN setting. |
If you are not using the Cloud SQL Auth Proxy, you will use this address as the host address that your applications or tools use to connect to the instance.
gcloudsqlusersset-passwordsqlserverno-host--instance=[INSTANCE_NAME]\--password=[PASSWORD]
To create an instance, use a Terraform resource.
To apply your Terraform configuration in a Google Cloud project, complete the steps in the following sections.
Set the default Google Cloud project where you want to apply your Terraform configurations.
You only need to run this command once per project, and you can run it in any directory.
export GOOGLE_CLOUD_PROJECT=PROJECT_ID
Environment variables are overridden if you set explicit values in the Terraform configuration file.
Each Terraform configuration file must have its own directory (also called a root module).
.tf
extension—for example main.tf
. In this tutorial, the file is referred to as main.tf
. mkdir DIRECTORY && cd DIRECTORY && touch main.tf
If you are following a tutorial, you can copy the sample code in each section or step.
Copy the sample code into the newly created main.tf
.
Optionally, copy the code from GitHub. This is recommended when the Terraform snippet is part of an end-to-end solution.
terraform init
Optionally, to use the latest Google provider version, include the -upgrade
option:
terraform init -upgrade
terraform plan
Make corrections to the configuration as necessary.
yes
at the prompt: terraform apply
Wait until Terraform displays the "Apply complete!" message.
To delete your changes, do the following:
deletion_protection
argument to false
. deletion_protection = "false"
yes
at the prompt: terraform apply
Remove resources previously applied with your Terraform configuration by running the following command and entering yes
at the prompt:
terraform destroy
Not all possible fields are shown in the following basic API call. For a prototype of a JSON request, see Settings.
Also see the Instances:insert page. For information about instance settings, including valid values for regions, see Instance settings. For information about machine types, see Custom instance configurations.
Don't include sensitive or personally identifiable information in instance-id
; the value is externally visible.
You do not need to include the project ID in the instance name. This is done automatically where appropriate (for example, in the log files).
The collation
field (not shown in the following basic API call) lets you set a default value for the type of collation used for the databases in your instance. This collation default is permanent at the instance level but not at the database level. You can change this default with a database administration tool, but only for a specific database that you are creating or updating. You cannot change the collation default for an instance after creating the instance (unless you recreate the instance). For information about collations in SQL Server, see Collation and Unicode support. For a prototype of a JSON request, see Settings. You can specify the following example string for the collation
parameter: SQL_Latin1_General_CP1_CI_AS
.
The timeZone
field (not shown in the following basic API call) lets you to set a time zone for an instance. After you create an instance, you can change the time zone of an instance. For more information and a list of accepted strings, see Settings. You can specify the following example string for the timeZone
field: "Pacific Standard Time"
. See more.
To create an instance that is integrated with Managed Microsoft AD, specify a domain, such as subdomain.mydomain.com
, for the domain
field. For more information, see Creating an instance with Windows Authentication. Additionally, note the procedures and constraints for integrating with a Managed Microsoft AD domain in a different project.
Before using any of the request data, make the following replacements:
SQLSERVER_2017_STANDARD
.root
user.db-perf-optimized-N-4
.ENTERPRISE
.true
.GOOGLE_MANAGED_INTERNAL_CA
or GOOGLE_MANAGED_CAS_CA
. If you don't specify serverCaMode
, then the default configuration is GOOGLE_MANAGED_INTERNAL_CA
. This feature is in Preview.CUSTOMER_MANAGED_CAS_CA
instances only.HTTP method and URL:
POST https://sqladmin.googleapis.com/v1/projects/PROJECT_ID/instances
Request JSON body:
{ "name": "INSTANCE_ID", "region": "REGION", "databaseVersion": "DATABASE_VERSION", "rootPassword": "PASSWORD", "settings": { "tier": "MACHINE_TYPE", "edition": "EDITION_TYPE", "backupConfiguration": { "enabled": true }, "dataCacheConfig": { "dataCacheEnabled": DATA_CACHE_ENABLED }, "ipConfiguration": { "privateNetwork": "PRIVATE_NETWORK", "authorizedNetworks": [AUTHORIZED_NETWORKS], "ipv4Enabled": false, "serverCaMode": "CA_MODE", "customSubjectAlternativeNames": "DNS_NAMES" } } }
To send your request, expand one of these options:
You should receive a JSON response similar to the following:
{ "kind": "sql#operation", "targetLink": "https://sqladmin.googleapis.com/v1/projects/PROJECT_ID/instances/INSTANCE_ID", "status": "PENDING", "user": "user@example.com", "insertTime": "2020-01-01T19:13:21.834Z", "operationType": "CREATE", "name": "OPERATION_ID", "targetId": "INSTANCE_ID", "selfLink": "https://sqladmin.googleapis.com/v1/projects/PROJECT_ID/operations/OPERATION_ID", "targetProject": "PROJECT_ID" }
After the instance is created, you can further configure the default user account.
Optionally, you can retrieve the automatically-assigned IPv4 address. In the response, that address is in the ipAddress
field.
Before using any of the request data, make the following replacements:
HTTP method and URL:
GET https://sqladmin.googleapis.com/v1/projects/PROJECT_ID/instances/INSTANCE_ID
To send your request, expand one of these options:
You should receive a JSON response similar to the following:
{ "kind": "sql#instance", "state": "RUNNABLE", "databaseVersion": "DATABASE_VERSION", "settings": { "authorizedGaeApplications": [], "tier": "MACHINE_TYPE", "kind": "sql#settings", "pricingPlan": "PER_USE", "replicationType": "SYNCHRONOUS", "activationPolicy": "ALWAYS", "ipConfiguration": { "authorizedNetworks": [], "ipv4Enabled": true }, "locationPreference": { "zone": "ZONE", "kind": "sql#locationPreference" }, "dataDiskType": "PD_SSD", "backupConfiguration": { "startTime": "19:00", "kind": "sql#backupConfiguration", "enabled": true }, "settingsVersion": "1", "dataDiskSizeGb": "10" }, "etag": "--redacted--", "ipAddresses": [ { "type": "PRIMARY", "ipAddress": "10.0.0.1" } ], "serverCaCert": { ... }, "instanceType": "CLOUD_SQL_INSTANCE", "project": "PROJECT_ID", "serviceAccountEmailAddress": "redacted@gcp-sa-cloud-sql.iam.gserviceaccount.com", "backendType": "BACKEND_TYPE", "selfLink": "https://sqladmin.googleapis.com/v1/projects/PROJECT_ID/instances/INSTANCE_ID", "connectionName": "PROJECT_ID:REGION:INSTANCE_ID", "name": "INSTANCE_ID", "region": "REGION", "gceZone": "ZONE" }
Not all possible fields are shown in the following basic API call. For a prototype of a JSON request, see Settings.
Also see the Instances:insert page. For information about instance settings, including valid values for regions, see Instance settings. For information about machine types, see Custom instance configurations.
Don't include sensitive or personally identifiable information in instance-id
; the value is externally visible.
You do not need to include the project ID in the instance name. This is done automatically where appropriate (for example, in the log files).
The collation
field (not shown in the following basic API call) lets you to set a default value for the type of collation used for the databases in your instance. This collation default is permanent at the instance level but not at the database level. You can change this default with a database administration tool, but only for a specific database that you are creating or updating. You can't change the collation default for an instance after creating the instance (unless you recreate the instance). For information about collations in SQL Server, see Collation and Unicode support. For a prototype of a JSON request, see Settings. You can specify the following example string for the collation
parameter: SQL_Latin1_General_CP1_CI_AS
.
The timeZone
field (not shown in the following basic API call) lets you to set a time zone for an instance. After you create an instance, you can change the time zone of an instance. For more information and a list of accepted strings, see Settings. You can specify the following example string for the timeZone
field: "Pacific Standard Time"
. See more.
To create an instance that is integrated with Managed Microsoft AD, specify a domain, such as subdomain.mydomain.com
, for the domain
field. For more information, see Creating an instance with Windows Authentication. Additionally, note the procedures and constraints for integrating with a Managed Microsoft AD domain in a different project.
Before using any of the request data, make the following replacements:
db-perf-optimized-N-4
.root
user.db-custom-[CPUS]-[MEMORY_MBS]
.ENTERPRISE
.true
.GOOGLE_MANAGED_INTERNAL_CA
or GOOGLE_MANAGED_CAS_CA
. If you don't specify serverCaMode
, then the default configuration is GOOGLE_MANAGED_INTERNAL_CA
. This feature is in Preview.CUSTOMER_MANAGED_CAS_CA
instances only.HTTP method and URL:
POST https://sqladmin.googleapis.com/sql/v1beta4/projects/PROJECT_ID/instances
Request JSON body:
{ "name": "INSTANCE_ID", "region": "REGION", "databaseVersion": "DATABASE_VERSION", "rootPassword": "PASSWORD", "settings": { "tier": "MACHINE_TYPE", "edition": "EDITION_TYPE", "backupConfiguration": { "enabled": true }, "dataCacheConfig": { "dataCacheEnabled": DATA_CACHE_ENABLED }, "ipConfiguration": { "privateNetwork": "PRIVATE_NETWORK", "authorizedNetworks": [AUTHORIZED_NETWORKS], "ipv4Enabled": false, "serverCaMode": "CA_MODE", "customSubjectAlternativeNames": "DNS_NAMES" } } }
To send your request, expand one of these options:
You should receive a JSON response similar to the following:
{ "kind": "sql#operation", "targetLink": "https://sqladmin.googleapis.com/sql/v1beta4/projects/PROJECT_ID/instances/INSTANCE_ID", "status": "PENDING", "user": "user@example.com", "insertTime": "2020-01-01T19:13:21.834Z", "operationType": "CREATE", "name": "OPERATION_ID", "targetId": "INSTANCE_ID", "selfLink": "https://sqladmin.googleapis.com/sql/v1beta4/projects/PROJECT_ID/operations/OPERATION_ID", "targetProject": "PROJECT_ID" }
After the instance is created, you can further configure the default user account.
Optionally, you can retrieve the automatically-assigned IPv4 address. In the response, that address is in the ipAddress
field.
Before using any of the request data, make the following replacements:
HTTP method and URL:
GET https://sqladmin.googleapis.com/sql/v1beta4/projects/PROJECT_ID/instances/INSTANCE_ID
To send your request, expand one of these options:
You should receive a JSON response similar to the following:
{ "kind": "sql#instance", "state": "RUNNABLE", "databaseVersion": "DATABASE_VERSION", "settings": { "authorizedGaeApplications": [], "tier": "MACHINE_TYPE", "kind": "sql#settings", "pricingPlan": "PER_USE", "replicationType": "SYNCHRONOUS", "activationPolicy": "ALWAYS", "ipConfiguration": { "authorizedNetworks": [], "ipv4Enabled": true }, "locationPreference": { "zone": "ZONE", "kind": "sql#locationPreference" }, "dataDiskType": "PD_SSD", "backupConfiguration": { "startTime": "19:00", "kind": "sql#backupConfiguration", "enabled": true }, "settingsVersion": "1", "dataDiskSizeGb": "10" }, "etag": "--redacted--", "ipAddresses": [ { "type": "PRIMARY", "ipAddress": "10.0.0.1" } ], "serverCaCert": { ... }, "instanceType": "CLOUD_SQL_INSTANCE", "project": "PROJECT_ID", "serviceAccountEmailAddress": "redacted@gcp-sa-cloud-sql.iam.gserviceaccount.com", "backendType": "BACKEND_TYPE", "selfLink": "https://sqladmin.googleapis.com/sql/v1beta4/projects/PROJECT_ID/instances/INSTANCE_ID", "connectionName": "PROJECT_ID:REGION:INSTANCE_ID", "name": "INSTANCE_ID", "region": "REGION", "gceZone": "ZONE" }
If you plan to create a Cloud SQL Enterprise Plus edition instance, and you want Cloud SQL to generate a write endpoint automatically for the instance, then enable the Cloud DNS API for your Google Cloud project.
If you already have a Cloud SQL Enterprise Plus edition instance and you want Cloud SQL to generate a write endpoint automatically, then create a replica that's enabled for advanced disaster recovery.
A write endpoint is a global domain name service (DNS) name that resolves to the IP address of the current primary instance automatically. This endpoint redirects incoming connections to the new primary instance automatically in case of a replica failover or switchover operation. You can use the write endpoint in a SQL connection string instead of an IP address. By using a write endpoint, you can avoid having to make application connection changes when a regional outage occurs.
For more information about obtaining the write endpoint for the instance, see View instance information. For more information about using the write endpoint to connect to the instance, see Connect by using a write endpoint.
Custom instance configurations let you select the amount of memory and CPUs that your instance needs. This flexibility lets you choose the appropriate VM shape for your workload. Machine type availability is determined by your Cloud SQL for SQL Server edition.
For workloads that require real-time processing, make sure that your instance has enough memory to contain the entire working set. However, there are other factors that can impact memory requirements, such as number of active connections, and internal overhead processes. You should perform load testing to avoid performance issues in your production environment.
When you configure your instance, select enough memory and vCPUs to handle your workload, and upgrade as your workload increases. A machine configuration with insufficient vCPUs might lose its SLA coverage. For more information, see Operational guidelines.
For Cloud SQL Enterprise edition instances, you can also create custom instance configurations using the gcloud sql instances create
command.
Machine type names use the following format: db-custom-NUMBER_OF_vCPUs-MEMORY
Replace NUMBER_OF_vCPUs with the number of CPUs in the machine and MEMORY with the amount of memory in the machine.
For example, if your machine name is db-custom
, and your machine has 1 CPU and 3840 MB of RAM, then the format for the machine is db-custom-1-3840
.
When selecting the number of CPUs and amount of memory, there are some restrictions on the configuration that you choose:
For Cloud SQL Enterprise Plus edition instances, machine types are predefined as described in the following sections.
This machine family offers balanced price-performance for a wide variety of SQL Server workloads with a memory to compute ratio of 1 vCPU:8 GB RAM. The performance-optimized machine family provides the following machine types to choose from:
Enterprise Plus machine type | vCPUs | Memory (GB) |
---|---|---|
db-perf-optimized-N-2 | 2 | 16 |
db-perf-optimized-N-4 | 4 | 32 |
db-perf-optimized-N-8 | 8 | 64 |
db-perf-optimized-N-16 | 16 | 128 |
db-perf-optimized-N-32 | 32 | 256 |
db-perf-optimized-N-48 | 48 | 384 |
db-perf-optimized-N-64 | 64 | 512 |
db-perf-optimized-N-80 | 80 | 640 |
db-perf-optimized-N-96 | 96 | 768 |
db-perf-optimized-N-128 | 128 | 864 |
This machine family offers high memory to compute ratios for memory-intensive workloads with one vCPU per 32 GB RAM. Memory-optimized machines are well suited for SQL Server workloads requiring complex queries, analytics and business intelligence reporting that benefit from storing larger datasets in memory during data processing. Memory-optimized machine family provides the following machine types to choose from:
Machine type | vCPUs | Memory (GB) |
---|---|---|
db-memory-optimized-N-4 | 4 | 128 |
db-memory-optimized-N-8 | 8 | 256 |
db-memory-optimized-N-16 | 16 | 512 |
*
) or trailing dots (for example, test.example.com.
).CUSTOMER_MANAGED_CAS_CA
instances only.Issue | Troubleshooting |
---|---|
Error message: Failed to create subnetwork. Router status is temporarily unavailable. Please try again later. Help Token: [token-ID] . | Try to create the Cloud SQL instance again. |
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-04-28 UTC.