[google-cloud-sql-discuss] I can connect the Proxy from my account, but not from either of two service accounts that should also have access.

In all three cases, the proxy starts, and is waiting for connections. If I'm running the proxy as myself, I can connect just fine, whether from the default MySQL client, or from Sequel Pro, or from Squirrel. But if I'm running the proxy from either the default service account, or a service account I created specifically for this, the client gets:

MySQL said: Lost connection to MySQL server at 'reading initial communication packet', system error: 0

and the proxy shows: 

2018/03/22 09:38:23 New connection for "<REDACTED>"
2018/03/22 09:38:24 couldn't connect to "<REDACTED>": ensure that the account has access to "<REDACTED>" (and make sure there's no typo in that name). Error during createEphemeral for <REDACTED>: googleapi: Error 403: Access Not Configured. Cloud SQL Administration API has not been used in project 773874261491 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/sqladmin.googleapis.com/overview?project=<REDACTED> then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry., accessNotConfigured

I have:

Cloud SQL Admin

Cloud SQL Client

Compute Instance Admin (v1)

Compute Network Admin

Compute Security Admin

Deployment Manager Editor

Service Account Actor

Service Account Admin

Service Account Key Admin

Project IAM Admin

Storage Admin

The default service account has:

Cloud SQL Client

Editor

The service account I created has:

Cloud SQL Client 

At a suggestion to try re-enabling the Cloud SQL API, I had it disabled and re-enabled. No change. Still:

Jamess-Mac-mini:~ jamesl$ ./cloud_sql_proxy -instances=<REDACTED>=tcp:3306

2018/03/22 09:37:42 Listening on 127.0.0.1:3306 for <REDACTED>

2018/03/22 09:37:42 Ready for new connections

{Sequel Pro connected just fine}

2018/03/22 09:37:50 New connection for "<REDACTED>"

2018/03/22 09:37:52 New connection for "<REDACTED>"

2018/03/22 09:38:01 Client closed local connection on 127.0.0.1:3306

2018/03/22 09:38:01 Client closed local connection on 127.0.0.1:3306

^C

Jamess-Mac-mini:~ jamesl$ ./cloud_sql_proxy -instances=<REDACTED>=tcp:3306 -credential_file=<REDACTED my new service account>.json

2018/03/22 09:38:19 using credential file for authentication; email=<REDACTED my new service account>

2018/03/22 09:38:19 Listening on 127.0.0.1:3306 for <REDACTED>

2018/03/22 09:38:19 Ready for new connections

{Sequel Pro failed to connect}

2018/03/22 09:38:23 New connection for "<REDACTED>"

2018/03/22 09:38:24 couldn't connect to "<REDACTED>": ensure that the account has access to "<REDACTED>" (and make sure there's no typo in that name). Error during createEphemeral for <REDACTED>: googleapi: Error 403: Access Not Configured. Cloud SQL Administration API has not been used in project 773874261491 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/sqladmin.googleapis.com/overview?project=<REDACTED> then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry., accessNotConfigured

^C

Jamess-Mac-mini:~ jamesl$ ./cloud_sql_proxy -instances=<REDACTED>=tcp:3306 -credential_file=<REDACTED default service account>.json

2018/03/22 09:46:41 using credential file for authentication; email=<REDACTED default service account>

2018/03/22 09:46:41 Listening on 127.0.0.1:3306 for <REDACTED>

2018/03/22 09:46:41 Ready for new connections

{Sequel Pro failed to connect}

2018/03/22 09:46:45 New connection for "<REDACTED>"

2018/03/22 09:46:46 couldn't connect to "<REDACTED>": ensure that the account has access to "<REDACTED>" (and make sure there's no typo in that name). Error during createEphemeral for <REDACTED>: googleapi: Error 403: Access Not Configured. Cloud SQL Administration API has not been used in project <REDACTED> before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/sqladmin.googleapis.com/overview?project=<REDACTED> then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry., accessNotConfigured

^C

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/c0e72982-5184-4195-95d6-edc39fb36c39%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.