cloud-sql-proxy: SQL Admin API 503s preventing some connections

Bug Description

Can’t connect to Cloud Sql Instance.

Example code (or command)

./cloud_sql_proxy -instances="PROJECT_ID:REGION:INSTANCE_NAME"=tcp:5432

Stacktrace

2022/06/24 12:09:36 current FDs rlimit set to 1048575, wanted limit is 8500. Nothing to do here.
2022/06/24 12:09:38 errors parsing config:
        googleapi: Error 503: Policy checks are unavailable., backendError

How to reproduce

  1. Update to
Google Cloud SDK 391.0.0
bq 2.0.75
core 2022.06.17
gsutil 5.10
  1. Try to connect to Cloud Sql Instance using Cloud Sql Proxy:
./cloud_sql_proxy -instances="PROJECT_ID:REGION:INSTANCE_NAME"=tcp:5432

Environment

  1. OS type and version: Mac mini (M1, 2020) Monterey Version 12.4
  2. Cloud SQL Proxy version (./cloud_sql_proxy -version): Cloud SQL Auth proxy: 1.31.0+darwin.amd64

About this issue

  • Original URL
  • State: closed
  • Created 2 years ago
  • Comments: 20 (7 by maintainers)

Most upvoted comments

Let me reach out to the control plane and update here.

@enocom it’s basically a VPN tunnel by Cloudflare. It’s a Wireguard implementation from what I last read: https://developers.cloudflare.com/warp-client/warp-modes/#1111-with-warp

The Admin API team has found and fixed the issue and is seeing a drop in error rates. If someone who was affected here would like to confirm it’s working again, I’d appreciate it.

@enocom I confirm Cloudflare WARP fixes the issue for me too.

I’ve got on-call looking into this right now.