Terraform-provider-google: google_service_account should support domain wide delegation

[ramyala]

Terraform Version

Terraform v0.11.8
+ provider.google v1.17.1
+ provider.kubernetes v1.2.0
+ provider.random v2.0.0
+ provider.template v1.0.0

Affected Resource(s)

Please list the resources as a list, for example:

• google_service_account

Terraform Configuration Files

resource "google_service_account" "sample" {
  account_id   = "sample"
  display_name = "sample service account"
}

Expected Behavior

The above resource doesn't have the ability to specify Gsuite domain wide delegation option. It would be helpful to support it through terraform.

[paddycarver]

Sadly, we're not able to support this until the upstream API has support for it. From what I can see, it does not, currently. Further, this seems to be a GSuite feature, not a GCP feature, which complicates things further.

Not saying it'll never be possible, but from what I can see, today it's not something we have the ability to support.

[morgante]

To reiterate @paddycarver's point it's been an ongoing discussion internally within Google about whether we can have an API for enabling domain-wide delegation.

[primeroz]

@morgante is this ongoing discussion got you anywhere ?

[morgante]

No updates currently unfortunately.

[jravetch]

@morgante Any updates you can share?

[sannnan]

so any update so far?

[BradErz]

would be nice to have this

[tbrown-payments]

Hey! Hoping this gets resolved.

[eschultink]

@morgante any forum where we can weigh in to help it get prioritized within Google?

[morgante]

@eschultink If you have a Google account team, please ask them to file a request for prioritizing this.