Add support for legacy users (#11)

* add support for migrating users

* fix passwords

* rename to legacy users

* rename output

* be explicit about user type

* indent and seperate concerns

Author: drsherluck

outputs.tf

@@ -12,3 +12,8 @@ output "admin_user_password" {
   sensitive = true
   value     = random_password.admin_user.result
 }
+
+output "legacy_users_passwords" {
+  sensitive = true
+  value     = { for user in var.legacy_users : user => random_password.legacy_users[user].result }
+}

user.tf

@@ -4,10 +4,25 @@ resource "random_password" "admin_user" {
 
 resource "google_sql_user" "admin_user" {
   instance = google_sql_database_instance.instance.name
-
   name     = local.admin_user
   password = random_password.admin_user.result
-  type     = "" # Equivalent of "BUILT_IN"
+  type     = "BUILT_IN"
+
+  deletion_policy = null
+}
+
+resource "random_password" "legacy_users" {
+  for_each = toset(var.legacy_users)
+  length   = 48
+}
+
+resource "google_sql_user" "legacy_users" {
+  for_each = toset(var.legacy_users)
+
+  instance = google_sql_database_instance.instance.name
+  name     = each.value
+  password = random_password.legacy_users[each.value].result
+  type     = "BUILT_IN"
 
   deletion_policy = null
 }

variables.tf

@@ -75,6 +75,11 @@ variable "labels" {
   default = {}
 }
 
+variable "legacy_users" {
+  type    = list(string)
+  default = []
+}
+
 variable "maintenance_window" {
   type = object({
     day          = number