Private Service Connect (PSC) is a Google Cloud networking feature that allows to connect to Google manages services from multiple VPC networks that belong to different groups, teams, projects, or organizations

More on Private Service Connect

More on Private Service Connect for Cloud SQL

Authentication depends on the resource type:

• Service connectors (sources) use standard Postgres password authentication over the PSC connection — see Service Connector (Source) Configuration below.
• Destinations (password) use standard Postgres password authentication over the PSC connection — see Destination Configuration (Password-based Auth) below.
• Destinations (IAM) use IAM database authentication over the PSC connection — see Destination Configuration (IAM) below.

Configuring Google Cloud SQL

These steps are common to both sources and destinations.

On Client Side

Enable Private Service Connect for a Cloud SQL Instance

https://cloud.google.com/sql/docs/postgres/configure-private-services-access-and-private-service-connect#enable-psa-instance

Jitsu Project ID to provide in the allowed-psc-projects parameter:

jitsu-cloud-infra

Provide Jitsu with Cloud SQL Instance Details

• Connection Name
• Private Service Connect (PSC) - DNS name
• Private Service Connect (PSC) - Service attachment

You can get this information by running:

gcloud sql instances describe CLOUD_SQL_INSTANCE --project=PROJECT | grep "dnsName:\|connectionName\|pscServiceAttachmentLink"