Data transfer service with cloudSQL postgres gives me precondition error

Google Cloud Database
1

Hi

I have a postgres in cloudSQL with a private IP. Up until recently, I was able to use data transfer service to transfer certain tables to BigQuery. The encryption mode was set to DISABLED because our postgres instance allowed connections without SSL.

Recently our security team decided to enforce SSL connections to postgres. Ever since the change, the data transfer service is unable to connect to the database.I changed the encryption mode to FULL and it keeps saying “Precondition check failed.: Please check your login information”. The login information is fine so don’t see why its failing.

2

Hi @aksima24
When you enable SSL enforcement on CloudSQL, the Data Transfer Service also needs valid SSL certificates to connect.

Here’s what to check:

  • In the Data Transfer config, set encryption mode = SSL (server-validated), not just FULL.

  • Make sure you upload the client SSL certificates (client cert, client key, server CA) in the transfer setup.

  • Verify that the CloudSQL instance is reachable from the Data Transfer location.

Without the correct certs, you will keep getting the “precondition check failed” error.