Add support for IAM authentication to google_sql_user

[shanesavoie]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment. If the issue is assigned to the "modular-magician" user, it is either in the process of being autogenerated, or is planned to be autogenerated soon. If the issue is assigned to a user, that user is claiming responsibility for the issue. If the issue is assigned to "hashibot", a community member has claimed the issue already.

Description

This is a preview feature, but would love support for this in the future.

https://cloud.google.com/sql/docs/postgres/create-manage-iam-users?authuser=1#gcloud

It looks like there's a new flag --type=cloud_iam_user|cloud_iam_service_account used to specify between a normal user and IAM authenticated user.

New or Affected Resource(s)

• google_sql_user

Potential Terraform Configuration

# Propose what you think the configuration to take advantage of this feature should look like.
# We may not use it verbatim, but it's helpful in understanding your intent.
resource "google_sql_user" "user" {
  ...
  type="cloud_iam_user"
}

References

• #0000

[dabbertorres]

I'd be happy to take a crack at adding this feature (over in magic-modules?), unless of course someone is already working on it.

Any objections/concerns?

[rileykarson]

@dabbertorres: Nobody is that I'm aware! You could edit in Magic Modules (there's a handwritten file @ https://github.com/GoogleCloudPlatform/magic-modules/blob/master/third_party/terraform/resources/resource_sql_user.go) but sending a PR in this repo is fine. One of us will upstream it to MM.

[rileykarson]

Looks like the change downstream was missing a Fixes:. Closing.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!