API-with-CloudSQL

apiVersion: apps/v1
kind: Deployment
metadata:
  name: <api>
  labels:
    app: <api>
spec:
  replicas: 1
  selector:
    matchLabels:
      app: <api>
  template:
    metadata:
      labels:
        app: <api>
    spec:
      containers:
      - name: <api>
        image: gcr.io/<omitted>/<ommited>:v5
        env:
          - name: NODE_ENV
            value: local
          - name: DB_DATABASE
            value: <database>
          - name: DB_HOST
            value: 127.0.0.1:3306
          - name: DB_USER
            valueFrom:
              secretKeyRef:
                name: cloudsql-db-credentials
                key: username
          - name: DB_PASSWORD
            valueFrom:
              secretKeyRef:
                name: cloudsql-db-credentials
                key: password
        ports:
        - containerPort: 3000
      - name: cloudsql-proxy
        image: gcr.io/cloudsql-docker/gce-proxy:1.11
        command: ["/cloud_sql_proxy","-instances=<INSTANCE_CONNECTION_NAME>=tcp:3306","-credential_file=/secrets/cloudsql/credentials.json"]
        volumeMounts:
            - name: cloudsql-instance-credentials
              mountPath: /secrets/cloudsql
              readOnly: true
      volumes:
        - name: cloudsql-instance-credentials
          secret:
            secretName: cloudsql-instance-credentials

---

apiVersion: v1
kind: Service
metadata:
  name: <api-service>
spec:
  externalTrafficPolicy: Cluster
  selector:
    app: <api>
  ports:
  - protocol: TCP
    port: 80
    targetPort: 3000
  type: LoadBalancer