adding cloud sql user with google_sql_user with type CLOUD_IAM_USER doesn't grant roles/cloudsql.instanceUser to the added user whereas it does when added via gcloud or ui about terraform-provider-google HOT 3 OPEN

Hi @qbaze I'm replicating this scenario, just to confirm:

1. If you are getting any errors, please share the message
2. Did you have the same issue with any settings in the google_sql_database_instance resource?
3. Were the resources created from 0 or had some of the resources already been created?

from terraform-provider-google.

hey @ggtisc

ad. 1 no execution errors, user is added successfully to the cloud sql instance
ad. 2 I don't understand your question, there are no errors on execution, resources are created but the roles/cloudsql.instanceUser role on the added user is missing whereas if iam user is added to cloud sql via UI it's being automatically granted
ad. 3 created from scratch

Maybe the question is if this is an expected behavior or it should mimic behavior of UI?

from terraform-provider-google.

That is right! If you use the UI it could make it automatically, but if you use terraform you need to configure everything manually including permissions, roles and so on.

from terraform-provider-google.