From f5bcb9c755a2c1747d0beeda568b6217d7420e7a Mon Sep 17 00:00:00 2001
From: prernakakkar-google
 <158031829+prernakakkar-google@users.noreply.github.com>
Date: Wed, 13 Aug 2025 20:05:06 +0000
Subject: [PATCH] feat(prebuiltconfig/alloydb-postgres): add tool to create
 user via Built in user type or IAM (#1130)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

…ilt in or IAM

Co-authored-by: Averi Kitsch <akitsch@google.com>
---
 cmd/root_test.go                              |  2 +-
 .../tools/alloydb-postgres-admin.yaml         | 51 ++++++++++++++++++-
 2 files changed, 50 insertions(+), 3 deletions(-)

diff --git a/cmd/root_test.go b/cmd/root_test.go
index 3b8f232230..bb749c1e46 100644
--- a/cmd/root_test.go
+++ b/cmd/root_test.go
@@ -1190,7 +1190,7 @@ func TestPrebuiltTools(t *testing.T) {
 			wantToolset: server.ToolsetConfigs{
 				"alloydb-postgres-admin-tools": tools.ToolsetConfig{
 					Name:      "alloydb-postgres-admin-tools",
-					ToolNames: []string{"alloydb-create-cluster", "alloydb-operations-get", "alloydb-create-instance", "alloydb-list-clusters", "alloydb-list-instances", "alloydb-list-users"},
+					ToolNames: []string{"alloydb-create-cluster", "alloydb-operations-get", "alloydb-create-instance", "alloydb-list-clusters", "alloydb-list-instances", "alloydb-list-users", "alloydb-create-user"},
 				},
 			},
 		},
diff --git a/internal/prebuiltconfigs/tools/alloydb-postgres-admin.yaml b/internal/prebuiltconfigs/tools/alloydb-postgres-admin.yaml
index 861c8180df..e248fbc8e1 100644
--- a/internal/prebuiltconfigs/tools/alloydb-postgres-admin.yaml
+++ b/internal/prebuiltconfigs/tools/alloydb-postgres-admin.yaml
@@ -164,7 +164,54 @@ tools:
       - name: clusterId
         type: string
         description: "The ID of the cluster to list users from."
-
+  alloydb-create-user:
+    kind: http
+    source: alloydb-api-source
+    method: POST
+    path: /v1/projects/{{.projectId}}/locations/{{.locationId}}/clusters/{{.clusterId}}/users
+    description: "Creates a new database user in an AlloyDB cluster. Takes the new user's name and a secure password. Optionally, a list of database roles can be assigned."
+    pathParams:
+      - name: projectId
+        type: string
+        description: "The GCP project ID."
+      - name: locationId
+        type: string
+        description: "The location of the cluster (e.g., 'us-central1')."
+        default: us-central1
+      - name: clusterId
+        type: string
+        description: "The ID of the cluster where the user will be created."
+    queryParams:
+      - name: userId
+        type: string
+        description: "The name for the new user. Must be unique within the cluster."
+    requestBody: |
+      {
+        "userType": "{{.userType}}"
+        {{- if eq .userType "ALLOYDB_BUILT_IN" -}}
+        , "password": "{{.password}}"
+        {{- end -}}
+        {{- if .databaseRoles }}
+        , "databaseRoles": [{{range $i, $role := .databaseRoles}}{{if $i}},{{end}}"{{$role}}"{{end}}]
+        {{- end }}
+      }
+    bodyParams:
+      - name: password
+        type: string
+        description: "A secure password for the new user. Required only for ALLOYDB_BUILT_IN userType."
+        required: false
+      - name: databaseRoles
+        type: array
+        description: "Optional. A list of database roles to grant to the new user (e.g., ['pg_read_all_data']). If not specified, the user will have no roles."
+        items:
+          name: role
+          type: string
+          description: "A single database role to grant to the user (e.g., 'pg_read_all_data')."
+      - name: userType
+        type: string
+        description: "The type of user to create. Valid values are: USER_TYPE_UNSPECIFIED, ALLOYDB_BUILT_IN, ALLOYDB_IAM_USER."
+        default: "ALLOYDB_BUILT_IN"
+        
 toolsets:
   alloydb-postgres-admin-tools:
     - alloydb-create-cluster
@@ -173,4 +220,4 @@ toolsets:
     - alloydb-list-clusters
     - alloydb-list-instances
     - alloydb-list-users
-  
+    - alloydb-create-user
\ No newline at end of file