unable to launch appengine on my vpc network

[nishitkumar]

I am trying to deploy my Node js application which will connect to CloudSQL database which is in our VPC network and have only private ip , but I am noticing that whenever I try to launch Appengine it gets launch on the default network with external ip , I want deploy my appengine on my vpc network so that I can connect to my CloudSQL database instance directly.

vpc name :- xyz and subnet name :- testing

I tried to add this on my yaml file 

network:

  name: xyz

  subnetwork_name: testing

but I am getting this error while launching it  error :- ailed, details: Required 'compute.firewalls.list' permission for 'projects/core' , I have given permission but I am not able to launch it on my vpc network.

I have give all the permission to service account but still not able to launch.

please help I am stuck.

[Marramirez]

Hi @nishitkumar,

Welcome to the Google Cloud Community!

Try to perform the following troubleshooting options:

1. Make sure that you are using the correct gcloud app deploy syntax. See documentation here
2. Make sure that your App Engine is properly connected to your VPC network. See documentation here
3. Check your configuration, especially with the VPC network configuration. See reference here
4. You can also get in touch with Google Cloud Support if the above options don't work.

In terms of your Service Account not having the compute.firewalls.list permission, follow the troubleshoot options below:

1. Check for the roles that contain the compute.firewalls permission in this documentation.
2. If none of the roles suit your needs, you can create a custom role. Follow this documentation in creating and managing custom roles.

let me know if it helped, thanks!

[nishitkumar]

@Marramirez  for your second step of suggestion does that applies to app engine flex , do we need to create vpc access connector for appengine flex to access vpc and resources or is it just for appengine standard.

[knet]

Hi, for the App Engine Flexible Environment, you don't need to create VPC connectors. The App Engine instances in Flex already run inside the VPC network.