Input format for service_account_id in google_service_account_iam_member has changed

[imrannayer]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
• Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.
• If an issue is assigned to the modular-magician user, it is either in the process of being autogenerated, or is planned to be autogenerated soon. If an issue is assigned to a user, that user is claiming responsibility for the issue. If an issue is assigned to hashibot, a community member has claimed the issue already.

Terraform Version

v1.0.5

Affected Resource(s)

• google_service_account_iam_member

Terraform Configuration Files

resource "google_service_account_iam_member" "admin-account-iam" {
  service_account_id = "projects/myprj_id_1/serviceAccounts/my-dummy-service-account"
  role               = "roles/iam.serviceAccountUser"
  member             = "user:user1@google.com"
}

Debug Output

Panic Output

Expected Behavior

It should be able to assign permission to service account.

Actual Behavior

Error: "service_account_id" ("projects/myprj_id_1/serviceAccounts/my-dummy-service-account") doesn't match regexp "projects/(?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?)|-)/serviceAccounts/((?:(?:[-a-z0-9]{1,63}\\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:[0-9]{1,19}|(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))@[a-z]+.gserviceaccount.com$|[0-9]{1,20}-compute@developer.gserviceaccount.com|[a-z](?:[-a-z0-9]{4,28}[a-z0-9])@[-a-z0-9\\.]{1,63}\\.iam\\.gserviceaccount\\.com$)"

Steps to Reproduce

1. terraform apply

Important Factoids

References

• #0000

[imrannayer]

Input format for service_account_id in google_service_account_iam_member use to be in following format:

"projects/myprj_id_1/serviceAccounts/my-dummy-service-account"

It is now expected to be in following format:

"projects/myprj_id_1/serviceAccounts/my-dummy-service-account@myprj_id_1.iam.gserviceaccount.com"

Seems like a change in API. Can we plz mention this in document and CHANGELOG as it is a breaking change and customers are complaining about it.

[imrannayer]

Actually it is not a bug or change. Closing this Issue

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.