Skip to content

firebase deploy (dataconnect) enables public IP in cloud sql instance #8745

Open
@federicobaiocco

Description

@federicobaiocco

[REQUIRED] Environment info

firebase-tools: 14.4.0

Platform: macOS

[REQUIRED] Test case

Create a cloud SQL instance without public IP:

terraform script:

resource "google_sql_database_instance" "primary" {
  name             = "my-db-instance"
  database_version = "POSTGRES_17"
  region           = "europe-west1"
  project          = var.project

  settings {
    tier              = var.tier
    edition           = var.edition
    availability_type = var.availability_type

    backup_configuration {
      enabled                        = true
      start_time                     = "03:00"
      point_in_time_recovery_enabled = true
      location                       = "europe-west1"
      transaction_log_retention_days = 7

      backup_retention_settings {
        retained_backups = 7
      }
    }

    ip_configuration {
      ipv4_enabled                                  = false
      private_network                               = "projects/${var.project}/global/networks/default"
      enable_private_path_for_google_cloud_services = true 
    }

    maintenance_window {
      day          = 7 # Sunday
      hour         = 3 # 3 AM
      update_track = "stable"
    }

    database_flags {
      name  = "cloudsql.iam_authentication"
      value = "on"
    }
  }

  deletion_protection = true
}

Then deploy dataconnect:
npx -y firebase-tools@latest deploy --only dataconnect --project <my-project>

It enables public IP for the cloud SQL instance

dataconnect: Instance distribution-platform settings not compatible with Firebase Data Connect. Updating instance. This may take a few minutes...
 - to enable public IP.
✔ Updating your instance...
i  dataconnect: Instance updated

I can do a terraform apply later, remove the public IP and still access my data via dataconnect. But every time I do a firebase deploy, the public IP is enabled again

[REQUIRED] Steps to reproduce

described above

[REQUIRED] Expected behavior

Public IP is not enabled

[REQUIRED] Actual behavior

Public IP is enabled

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions