[google-cloud-sql-discuss] Re: I can connect the Proxy from my account, but not from either of two service accounts that should also have access.

On Thursday, March 22, 2018 at 7:15:12 PM UTC-7, Dinesh (Google Platform Support) wrote:

It would be worth to verify your service account has "Cloud SQL Client" access in IAM and "Cloud SQL API" has been enabled correctly. Suggestions provided here resolved a similar issue in the past. 

As Captain Kirk so pithily said, "This is damn peculiar."

According to the "IAM Dashboard," the service accounts have "Cloud SQL Client":

But according to the "Service Accounts" tab, and according to gcloud . . . get-iam-policy, they have NOTHING:

Jamess-Mac-mini:~ jamesl$ gcloud iam service-accounts get-iam-policy REDACTED-service@REDACTED.iam.gserviceaccount.com

etag: ACAB

Updates are available for some Cloud SDK components.  To install them,

please run:

  $ gcloud components update

Jamess-Mac-mini:~ jamesl$ gcloud iam service-accounts get-iam-policy REDACTED-compute@developer.gserviceaccount.com

etag: ACAB

 That could explain what's going on with the proxy, but can somebody explain why I'm getting contradictory information here?

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/eee23d91-9892-4fbb-a129-ec57d2d55d21%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.