diff --git a/config/servicemappings/sql.yaml b/config/servicemappings/sql.yaml
index 6514e8ccb1..871cb97fa0 100644
--- a/config/servicemappings/sql.yaml
+++ b/config/servicemappings/sql.yaml
@@ -93,6 +93,8 @@ spec:
       containers:
         - type: project
           tfField: project
+      mutableButUnreadableFields:
+        - root_password
     - name: google_sql_ssl_cert
       kind: SQLSSLCert
       skipImport: true