Skip to content

alloydb: add ALLOYDB_IAM_GROUP user type to google_alloydb_user (beta) - #18795

Open
kenkania wants to merge 2 commits into
GoogleCloudPlatform:mainfrom
kenkania:alloydb-user-iam-group
Open

alloydb: add ALLOYDB_IAM_GROUP user type to google_alloydb_user (beta)#18795
kenkania wants to merge 2 commits into
GoogleCloudPlatform:mainfrom
kenkania:alloydb-user-iam-group

Conversation

@kenkania

@kenkania kenkania commented Aug 26, 2026

Copy link
Copy Markdown

Fixes: hashicorp/terraform-provider-google#29050

Adds ALLOYDB_IAM_GROUP to user_type on google_alloydb_user, so a Google group can be added as a database user and its members can authenticate with IAM group-based authentication.

The value only exists in the AlloyDB v1beta discovery document (v1 lists ALLOYDB_BUILT_IN and ALLOYDB_IAM_USER only), so userType is duplicated with exact_version and the new value is beta-only — the same pattern used for version on google_healthcare_fhir_store. The GA copy can be dropped once v1 picks the value up.

Test/doc coverage is a beta-only sample pair mirroring the existing ALLOYDB_IAM_USER samples: a documentation example and a test example built on the shared service networking bootstrap. Both enable the alloydb.iam_authentication and alloydb.iam_group_authentication instance flags that group authentication requires.

Notes for review:

  • As with other beta-only samples (for example on google_compute_backend_service), the beta-only doc example leaves an empty Example Usage section in the GA docs page. Happy to drop the doc sample if you'd rather avoid that.
  • I ran the acceptance tests with my GCP project and got --- PASS: TestAccAlloydbUser_alloydbUserIamGroupTestExample (943.69s)
alloydb: added `ALLOYDB_IAM_GROUP` as a possible value for `user_type` in `google_alloydb_user` (beta)

@google-cla

google-cla Bot commented Aug 26, 2026

Copy link
Copy Markdown

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

@modular-magician modular-magician added the awaiting-approval Pull requests that need reviewer's approval to run presubmit tests label Aug 26, 2026
ALLOYDB_IAM_GROUP lets a Google group be added as a database user so its
members authenticate via IAM group-based authentication. The value is only
present in the v1beta discovery document, so user_type is duplicated with
exact_version to keep the GA provider (v1) validating the two existing
values, following the same pattern as google_healthcare_fhir_store.version.

Adds a beta-only sample pair covering the new user type: a documentation
example and a test example built on the shared service networking bootstrap,
matching the existing ALLOYDB_IAM_USER samples.
@kenkania
kenkania force-pushed the alloydb-user-iam-group branch from 97830f2 to 331a104 Compare August 26, 2026 13:56
@github-actions

Copy link
Copy Markdown

Googlers: For automatic test runs see go/terraform-auto-test-runs.

@roaks3, a repository maintainer, has been assigned to review your changes. If you have not received review feedback within 2 business days, please leave a comment on this PR asking them to take a look.

You can help make sure that review is quick by doing a self-review and by running impacted tests locally.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting-approval Pull requests that need reviewer's approval to run presubmit tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support ALLOYDB_IAM_GROUP in google_alloydb_user in beta provider

2 participants