-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
google_bigquery_dataset_access unable to handle service account emails with mixed/upper cases #19547
google_bigquery_dataset_access unable to handle service account emails with mixed/upper cases #19547
Comments
I recently discovered that it is not possible to create service accounts with all caps/mixed case via Google Cloud Console. However, it is possible to do that via gcloud CLI. gcloud iam service-accounts create TEST-SERVICE-ACCOUNT --description "Creating service account with all caps" --display-name TEST-SERVICE-ACCOUNT Output: |
According to terraform registry isn't possible to create a Apparently it is possible to create it through CLI but I don't have permission to confirm this. |
My comment here confirms this understanding. CLI allows the service accounts to be created with upper case. |
I tried an alternative of using
google_bigquery_dataset_iam_member.editor: Creating... Can the same be implemented for |
I opened GoogleCloudPlatform/magic-modules#11875 to fix For a comparison of all the resources that handle dataset permissions, see the Notes in https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/bigquery_dataset_iam. |
Community Note
Terraform Version & Provider Version(s)
Terraform v1.9.6
on darwin_arm64
Affected Resource(s)
google_bigquery_dataset_access
Terraform Configuration
Debug Output
https://gist.github.com/kamal-1/49cd54c47b1733296b918c08f71d0bb7
Expected Behavior
Terraform apply should succeed after the access is granted to the service account.
Actual Behavior
Terraform apply completes with an error. Note that the access is granted but it fails while validation for service accounts having upper case or mixed case email addresses.
Steps to reproduce
google_bigquery_dataset_access
to assign a BigQuery role to the upper case service account email.terraform apply
. Fails with errorError: Provider produced inconsistent result after apply
Important Factoids
References
There have been similar issues in the past. We were hoping that 17994 being the latest one, would have fixed the issue but even the latest version 6.3.0 has the issue.
#17994
#11985
b/369584826
The text was updated successfully, but these errors were encountered: