pip install Django psycopg2-binary gunicorn

pip install "cloud-sql-python-connector[pg8000]"

import os

**CRITICAL:**
- App Engine connects via **Unix socket** at `/cloudsql/PROJECT:REGION:INSTANCE`
- Local development requires **Cloud SQL Auth Proxy** on `127.0.0.1:5432`
- Never hardcode connection strings - use environment variables

runtime: python310
entrypoint: gunicorn -b :$PORT myproject.wsgi:application

env_variables:
  DB_NAME: "mydb"
  DB_USER: "postgres"
  CLOUD_SQL_CONNECTION_NAME: "project-id:region:instance-name"

**CRITICAL:**
- `beta_settings.cloud_sql_instances` enables the Unix socket at `/cloudsql/...`
- DB_PASSWORD should be set via `gcloud app deploy` or Secret Manager, not in app.yaml

---

undefined

**Key Points:**
- Use `POSTGRES_15` or later for best compatibility
- `db-f1-micro` is cheapest for dev ($7-10/month), use `db-g1-small` or higher for production
- Note the **connection name**: `PROJECT_ID:REGION:INSTANCE_NAME`

---

Django>=5.1,<6.0
psycopg2-binary>=2.9.9
gunicorn>=23.0.0
whitenoise>=6.7.0

import os

**Why these settings:**
- `CONN_MAX_AGE=60` reduces connection overhead (Cloud SQL has connection limits)
- WhiteNoise serves static files without Cloud Storage
- `ALLOWED_HOSTS` must include `.appspot.com` for App Engine

---

undefined

**Run the proxy:**
```bash

**Set environment variables for local dev:**
```bash
export DB_NAME=mydb
export DB_USER=postgres
export DB_PASSWORD=your_password
export DEBUG=True

undefined

**For production migrations (via Cloud Build or local with proxy):**
```bash

---

import multiprocessing

**app.yaml entrypoint options:**
```yaml

**Key Points:**
- App Engine Standard limits workers (F1: 1 worker, F2: 2 workers)
- Use `gthread` worker class for I/O-bound Django apps
- Set timeout < 60s to avoid App Engine killing requests

---

undefined

**Verify deployment:**
```bash

---

import os
from pathlib import Path

BASE_DIR = Path(__file__).resolve().parent.parent

undefined

runtime: python310
entrypoint: gunicorn -b :$PORT -w 2 -t 55 --threads 4 myproject.wsgi:application

instance_class: F2

env_variables:
  DB_NAME: "mydb"
  DB_USER: "postgres"
  CLOUD_SQL_CONNECTION_NAME: "project-id:us-central1:instance-name"
  DEBUG: "False"

beta_settings:
  cloud_sql_instances: "project-id:us-central1:instance-name"

handlers:
  - url: /static
    static_dir: static/
    secure: always

  - url: /.*
    script: auto
    secure: always

automatic_scaling:
  min_instances: 0
  max_instances: 2
  target_cpu_utilization: 0.65

Django>=5.1,<6.0
psycopg2-binary>=2.9.9
gunicorn>=23.0.0
whitenoise>=6.7.0

import os

def get_database_config():
    """Return database config based on environment."""
    is_production = os.getenv('GAE_APPLICATION', None)

    if is_production:
        return {
            'ENGINE': 'django.db.backends.postgresql',
            'NAME': os.environ['DB_NAME'],
            'USER': os.environ['DB_USER'],
            'PASSWORD': os.environ['DB_PASSWORD'],
            'HOST': f"/cloudsql/{os.environ['CLOUD_SQL_CONNECTION_NAME']}",
            'PORT': '',
            'CONN_MAX_AGE': 60,
        }
    else:
        return {
            'ENGINE': 'django.db.backends.postgresql',
            'NAME': os.environ.get('DB_NAME', 'mydb'),
            'USER': os.environ.get('DB_USER', 'postgres'),
            'PASSWORD': os.environ.get('DB_PASSWORD', ''),
            'HOST': '127.0.0.1',
            'PORT': '5432',
            'CONN_MAX_AGE': 60,
        }

DATABASES = {'default': get_database_config()}

from google.cloud import secretmanager

def get_secret(secret_id, version_id='latest'):
    """Retrieve secret from Google Secret Manager."""
    client = secretmanager.SecretManagerServiceClient()
    project_id = os.environ.get('GOOGLE_CLOUD_PROJECT')
    name = f"projects/{project_id}/secrets/{secret_id}/versions/{version_id}"
    response = client.access_secret_version(request={"name": name})
    return response.payload.data.decode('UTF-8')

**When to use**: Production deployments requiring proper secret management

undefined

**When to use**: Local development when you can't install Cloud SQL Auth Proxy

undefined

**When to use**: Load balancer health checks, monitoring database connectivity

---

undefined

**Django settings for IAM auth:**
```python
DATABASES = {
    'default': {
        'ENGINE': 'django.db.backends.postgresql',
        'NAME': os.environ['DB_NAME'],
        'USER': f"{os.environ['SERVICE_ACCOUNT']}@{os.environ['PROJECT_ID']}.iam",
        'HOST': f"/cloudsql/{os.environ['CLOUD_SQL_CONNECTION_NAME']}",
        'PORT': '',
        # No PASSWORD needed with IAM auth
    }
}

undefined

**Why PgBouncer:**
- Cloud SQL limits connections (25-4000 depending on tier)
- Django's `CONN_MAX_AGE` helps but doesn't pool across processes
- PgBouncer provides true connection pooling

undefined

**Option 2: Local with Proxy (Simple)**
```bash
./cloud-sql-proxy PROJECT:REGION:INSTANCE &
python manage.py migrate

{
  "dependencies": {
    "Django": ">=5.1,<6.0",
    "psycopg2-binary": ">=2.9.9",
    "gunicorn": ">=23.0.0",
    "whitenoise": ">=6.7.0"
  },
  "optional": {
    "google-cloud-secret-manager": ">=2.20.0",
    "cloud-sql-python-connector": ">=1.12.0"
  }
}