google_iam_service_account resource

Syntax

A google_iam_service_account is used to test a Google ServiceAccount resource

Examples

describe google_iam_service_account(project: 'chef-gcp-inspec', name: "display-name@project-id.iam.gserviceaccount.com") do
  it { should exist }
  its('display_name') { should cmp '' }
end

describe google_iam_service_account(project: 'chef-gcp-inspec', name: "nonexistent@project-id.iam.gserviceaccount.com") do
  it { should_not exist }
end

Properties

Properties that can be accessed from the google_iam_service_account resource:

name

The name of the service account.

project_id

Id of the project that owns the service account.

unique_id

Unique and stable id of the service account

email

Email address of the service account.

display_name

User specified description of service account.

oauth2_client_id

OAuth2 client id for the service account.

GCP Permissions

Ensure the Identity and Access Management (IAM) API is enabled for the current project.