Your first generation CloudSQL instance has the app name as an authorized user, the second generation doesn’t. What happens if you create a service account for your app on the second generation instance?
Your logs show connection errors to the instance from a user without password. -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/5a428670-4c5d-4091-80b2-cf52d2f55af7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.