Since this module uses google's api, it does the same thing, regardless of the grants

But, it is not the biggest problem. The biggest problem is that https://github.com/pulumi/pulumi-postgresql (which I think is the module itself), doesn't support TLS. There is no way to specify client cert, key and server CA. So, for me, it is unacceptable to create users via unsecured connection

If you put 'sslmode' to verifyca, or even required, you will have that error

This module uses a terraform provider https://github.com/terraform-providers/terraform-provider-postgresql. I even tried libpq configuration file, but there is no way to specify SERVICE NAME https://www.postgresql.org/docs/current/libpq-pgservice.html. I also tried env variables, but there is no way to get it working https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-PARAMKEYWORDS