Also, on

destroy

, our proxy isn’t even started, so the deletion of the

mysql.Grants

doesn’t happen.

Your Pulumi application is not executed during a

destroy

, only your state file is acted on, so I don't believe you can use

cloud_sql_proxy

in this manner. However the Automation API would allow you to do this easily. You would do something essentially like this: