Add service_account property on google_cloudbuildv2_connection

[mbouillaud]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
• Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.
• If an issue is assigned to a user, that user is claiming responsibility for the issue.
• Customers working with a Google Technical Account Manager or Customer Engineer can ask them to reach out internally to expedite investigation and resolution of this issue.

Description

Need

As for google_cloudbuild_trigger is it possible to add the ability to specify custom service_account with terraform module google_cloudbuildv2_connection ?

Example

resource "google_cloudbuildv2_connection" "bitbucket_connection" {
  location = "global"
  name = "bitbucket_connection"
  project         = "test-project"
  service_account = "projects/test/serviceAccounts/my-sa@my-project.iam.gserviceaccount.com"
  bitbucket_cloud_config {
    workspace = "test"
    read_authorizer_credential {
      user_token_secret_version = "mysecret"
    }
    authorizer_credential {
      user_token_secret_version = "mysecret"
    }
    webhook_secret_secret_version = "mysecret"
  }
}

New or Affected Resource(s)

• google_cloudbuildv2_connection

Potential Terraform Configuration

terraform {
  required_version = "1.5.7"
  required_providers {
    google = {
      source  = "hashicorp/google"
      version = ">=5.21.0"
    }
  }
}

References

No response

[melinath]

@mbouillaud I don't see a service account field in the API: https://cloud.google.com/build/docs/api/reference/rest/v2/projects.locations.connections

So, this sounds like a feature request for the underlying API team.

Could you elaborate one what the use case for having a service account on the connection resource is?