Can not use dynamic Service Account in Safer Cluster

[trajan0x]

TL;DR

Repetition of #27, but with safer-cluster module

Terraform Resources

# Create the nodeconfig service account
resource "google_service_account" "server" {
  account_id   = "server"
  display_name = "Server IAM"
  project      = var.project_id
}

module "gke" {
  source  = "terraform-google-modules/kubernetes-engine/google//modules/safer-cluster"
  version = "23.0.0"
  # some other stuff
  compute_engine_service_account = google_service_account.server.email
}

Detailed design

This is the same issue as #27 but on the safer-cluster module. 

│
│   on .terraform/modules/cortex-cluster.gke/modules/beta-private-cluster/sa.tf line 40, in resource "google_service_account" "cluster_service_account":
│   40:   count        = var.create_service_account ? 1 : 0

When compute_engine_service_account is dynamic, no determination can be made on this variable:
https://github.com/terraform-google-modules/terraform-google-kubernetes-engine/blob/master/modules/safer-cluster/main.tf#L114 until apply.

Passing create_service_account as default will fix this issue

Additional information

No response

[trajan0x]

I seem to have mislabeled this as enhancement, can we label this as a bug

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days