This page shows you how to help prevent the accidental deletion of existing or new Filestore instances.
Overview
You can set the deletion protection option when you create an instance or update this option on an existing instance. In both cases, deletion is prevented at the instance level.
Plan for deletion
If you are planning to delete an instance, complete the following steps:
- Confirm that it is safe to delete the instance.
- Confirm that deletion protection is deactivated. If necessary, edit the instance to deactivate deletion protection.
Limitations
Deletion protection doesn't prevent the following operations:
- Editing an instance
- Deleting a backup
- Reverting a snapshot
- Deleting a file
Set deletion protection on a new instance
This section shows you how to set the deletion protection option when creating a new instance. By default, the feature is deactivated.
If deletion protection is enabled, an attempt to delete the instance fails.
Google Cloud console
- In the Google Cloud console, go to the Filestore Instances page.
Go to the Filestore Instances page
- Click Create Instance.
- Follow the instructions noted in Create an instance.
Before clicking Create, add the following specifications:
- In the Tags section, expand the Advanced options section.
- In the Deletion protection section, select the Enable deletion protection checkbox. We recommend stating the reason for enabling deletion protection to provide more context.
- Click Create.
gcloud
Install and initialize the gcloud CLI.
If you already have the gcloud CLI installed, update it:
gcloud components update
Run the
gcloud filestore instances create
command to create a Filestore instance. Follow the instructions noted in Create an instance. Before you press Enter, add the following options:--deletion-protection \ --deletion-protection-reason=PROTECTION_REASON
Where:
--deletion-protection
is the flag used to enable deletion protection when creating the instance.--deletion-protection-reason
is the flag used to add a description of the justification for the instance's deletion protection setting you chose. PROTECTION_REASON is the description text you want to use. For example, "All genomics data must adhere to current organization policies." For more information, see Deletion protection.
REST API
Have gcloud CLI installed and initialized, which lets you generate an access token for the
Authorization
header.Use
cURL
to call the Filestore API. Follow the instructions noted in Create an instance, adding the following options before running the command:"deletionProtectionEnabled", "deletionProtectionReason":"PROTECTION_REASON"
Where:
deletionProtectionEnabled
is the flag used to enable deletion protection when creating the instance.deletionProtectionReason
is the flag used to add a description of the justification for the instance's deletion protection setting you chose. PROTECTION_REASON is the description text you want to use. For example, "All genomics data must adhere to current organization policies." For more information, see Deletion protection.
Set or remove deletion protection on an existing instance
This section shows you how to edit the deletion protection option on an instance. By default, the feature is deactivated.
If you enable the option, a subsequent attempt to delete the instance fails.
Google Cloud console
To edit Filestore instances using the Google Cloud console, navigate to the Edit instance page, where you can edit the instance description, manage IP-based access control rules, and scale the file share performance:
In the Google Cloud console, go to the Filestore Instances page.
Click the instance ID of the instance you want to edit.
On the Instance details page, click Edit to go to the Edit instance page.
In the Deletion protection section, select the Enable deletion protection checkbox. We recommend stating the reason for enabling deletion protection to provide more context.
Click Save.
gcloud
To enable deletion protection when you update an instance, use the
gcloud filestore instances update
command similar to the following:
gcloud filestore instances update INSTANCE_NAME \
--deletion-protection \
--deletion-protection-reason=PROTECTION_REASON
Where:
INSTANCE_NAME
is the name of the instance you want to edit. For example,my-genomics-instance
.PROTECTION_REASON
is the description text you want to use. For example, "All genomics data must adhere to current organization policies." For more information, see Deletion protection.
To deactivate deletion protection when you update an instance, use a command similar to the following:
gcloud filestore instances update INSTANCE_NAME \
--no-deletion-protection
Where:
INSTANCE_NAME
is the name of the instance you want to edit. For example,my-genomics-instance
.
Once deactivated, the deletion-protection-reason
field is cleared.
REST API
Have gcloud CLI installed and initialized, which lets you generate an access token for the
Authorization
header.Use
cURL
to call the Filestore API.To set deletion protection on an instance, specify
true
in thedeletionProtectionEnabled
field. To remove it, specifyfalse
in the field. Use an operation call similar to the following:curl --request PATCH \ 'https://file.googleapis.com/v1/projects/PROJECT/locations/LOCATION/instances?instanceId=NAME?updateMask=deletionProtectionEnabled,deletionProtectionReason' \ --header "Authorization: Bearer $(gcloud auth print-access-token)" \ --header 'Accept: application/json' \ --header 'Content-Type: application/json' \ --data '{"tier":"TIER","networks":[{"network":"NETWORK"}],"fileShares":[{"capacityGb":CAPACITY,"name":"SHARE_NAME"}], "deletionProtectionEnabled": true, "deletionProtectionReason": "PROTECTION_REASON"}' \ --compressed
Where:
deletionProtectionEnabled
is the flag used to enable deletion protection. For example,true
orfalse
.deletionProtectionReason
is the flag used to add a description of the justification for the instance's deletion protection setting you chose. Only present when the feature is enabled. PROTECTION_REASON is the description text you want to use. For example, "All genomics data must adhere to current organization policies." For more information, see Deletion protection.