This message was deleted.

I don't do anything special to get my cloud run services to access CloudSQL -- no need for annotations or anything like that. I just grant the service account that runs the service "cloudsql.client" and "cloudsql.instanceUser"

projects.IAMBinding(
            f"cloud-sql-client-binding",
            role="roles/cloudsql.client",
            members=[
                pulumi.Output.concat("serviceAccount:", sa.service_accounts[user].email)
                for user in sql_users
            ],
            project=project_id,
            opts=pulumi.ResourceOptions(depends_on=sql_user_resources),
        )
        projects.IAMBinding(
            f"cloud-sql-user-binding",
            role="roles/cloudsql.instanceUser",
            members=[
                pulumi.Output.concat("serviceAccount:", sa.service_accounts[user].email)
                for user in sql_users
            ],
            project=project_id,
            opts=pulumi.ResourceOptions(depends_on=sql_user_resources),
        )

Then in your service/function code, you just make use of Google's Cloud SQL Connector library e.g.

import os
from google.cloud.sql.connector import Connector

def create_connection():
    with Connector() as connector:
        return connector.connect(
            os.getenv("CLOUD_SQL_CONNECTION_NAME"),
            "pg8000",
            db="my-db",
            user=os.getenv("CLOUD_SQL_USER"),
            enable_iam_auth=True,
        )

Thanks. That was my fallback as well, and it works. It's just quite a bit slower ons creating the connection compared to using a Unix socket. I don't mind this on a cloud run instance, but it is unpleasant with short lived cloud functions.

Ah... yeah, fair enough.

@miniature-computer-95401 did you happen to figure this out?

Funny enough, because I wanted to use psycopg3, I ended up creating a custom solution to connect to Cloud SQL via unix sockets while still leveraging Cloud IAM auth: https://github.com/GoogleCloudPlatform/cloud-sql-python-connector/issues/219#issuecomment-2038917429

Ah this is interesting. I'll give this a shot.