Quickstart: Protect and recover a Cloud SQL instance to a backup vault

Learn how to protect and restore a Cloud SQL instance to a backup vault.

In this quickstart, you perform the following tasks:

• Configure a scheduled backup for a Cloud SQL instance.
• Back up a Cloud SQL instance into a backup vault.
• Restore a Cloud SQL instance from a backup.

Before you begin

1. Enable the Backup and DR Service API in your Google Cloud project.

   Enable the API

2. Create a backup vault . Backup vaults provide protection for backups by storing them in secure, isolated, and specialized storage. For more information about backup vaults, see Backup vault for immutable and indelible backups .

3. Create a backup plan .

Grant a role to the backup vault service agent

Every backup vault created has a unique service agent linked to it. For Cloud SQL instances, the service agent performs actions on behalf of the Backup and DR Service, so it needs appropriate permissions on the projects it needs to access.

Use the following instructions to grant a role to the service agent.

1. In the Google Cloud console, go to the Backup vaultspage.

   Go to Backup vaults

2. Click the backup vault name and copy the service agent's email address.

3. In the Google Cloud console, go to the IAMpage.

   Go to IAM

4. In the New principlesfield, enter the service agent's email address.

5. From the Select a rolelist, select the BackupDR Cloud SQL Operator( roles/backupdr.cloudSqlOperator ) role.

6. Click Add another role.

7. From the Select a rolelist, select the Service Account User( roles/iam.serviceAccountUser ) role.

8. Click Save.

Back up a Cloud SQL instance into a backup vault

In the Google Cloud console, you can back up Cloud SQL instances to a backup vault by applying backup plans. You can back up in either of these two ways: Scheduled backupsand On-demand backups.

Configure a scheduled backup

Use the following instructions to configure a scheduled backup for Cloud SQL instances.

1. In the Google Cloud console, go to the Vaulted backupspage.

   Go to Vaulted backups

2. Click Schedule backup.

3. From the Resource Typelist, select Cloud SQL.

4. From the Projectlist, select the project where the Cloud SQL instance is located.

5. From the Regionlist, select the region where your instances are located.

6. From the Resourceslist, click Browse. Choose the Cloud SQL instance that you want to back up and click Done.

7. Click Continue.

8. From the Backup planlist, click Select.

9. Choose a backup plan that you want to protect the Cloud SQL instance with.

10. Click Done.

11. Review the backup details and click Schedule.

    As the backup window is set to six hours, you can take an on-demand backup of the Cloud SQL instance.

Take an on-demand backup

Initiate an on-demand backup for a Cloud SQL instance with a backup plan by triggering the backup rule to run immediately.

Use the following instructions to create an on-demand backup.

1. In the Google Cloud console, go to the Vaulted backupspage.

   Go to Vaulted backups

   The Vaulted backupspage lists only the data resources that have backup plans applied and their backups stored in a backup vault within that project.

2. Select the resource to back up. Either from the more_vert menu, or from the details page for the resource, select Create on-demand backup.

3. In the Create an on-demand backupwindow, select a backup rule to use and click Create.

4. To view the status of the on-demand backup job, click Notifications.

   1. In the Google Cloud console, go to the Jobspage to view the backup operation status.

      Go to Jobs

Restore a Cloud SQL instance from a backup

You can restore a Cloud SQL instance to the same project or to a different project.

Use the following instructions to restore a Cloud SQL instance into a backup vault from a backup.

1. In the Google Cloud console, go to the Vaulted backupspage.

   Go to Vaulted backups

   The Vaulted backupspage lists only the instances that have backup plans applied and their backups stored in a backup vault within a project.

2. Select the backup that you want to restore. Either from the backup details page for the backup, or from the more_vert menu, select Restore.

   The Restore pagedisplays where you select the following restore options:

   • The Resource typeis prefilled with Cloud SQL .
   • In Resource name, select the Cloud SQL instance to restore.
   • When you click Backup, a pane opens showing all available backups. Select the specific backup to restore.
   • For Choose the restore destination, select the project into which you want to restore the Cloud SQL instance.
   • Click Continue.

   • The next page shows the restore details so far, and prompts you to Choose restore destination, with these options:

     • Restore to a new instance: This creates a new instance based on the configuration stored in your backup. You can customise the instance after the restore is complete. Provide a new Instance IDusing lowercase letters, numbers, and hyphens. Start with a letter.
     • Overwrite an existing instance: Select an existing instance to overwrite from the list of available instances.
     • Overwrite the source instance: This will overwrite your current instance. All the current data on the selected instance will be overwritten, including previous point-in-time recovery logs. The overwritten data cannot be recovered later. This is not recommended for production use.

3. In the Google Cloud console, go to the Jobspage to view the restore operation status.

   Go to Jobs

Clean up

To avoid incurring charges to your Google Cloud account, remember to delete the resources used on this page if you have no further use for them.

Use the following instructions to remove the backup plan from the backed up Cloud SQL instance.

1. In the Google Cloud console, go to the Vaulted resourcespage.

   Go to Vaulted resources

2. Select the backed up instance.

3. Click Remove backup plan.

Use the following instructions to delete the backup plan. Deleting the backup plan is an optional step.

1. In the Google Cloud console, go to the Backup planspage.

   Go to Backup plans

2. Select the backup plan and click Delete.

   This deletes the backup plan and related contents.

Use the following instructions to delete the backup vault. Deleting the backup vault is an optional step.

1. In the Google Cloud console, go to the Backup vaultspage.

   Go to Backup vaults

2. Click the backup vault and click Delete.

   This deletes the backup vault and related contents.