Syntax
A google_iam_service_account_key
is used to test a Google ServiceAccountKey resource
Examples
google_iam_service_account_keys(project: 'chef-gcp-inspec', service_account: "display-name@project-id.iam.gserviceaccount.com").key_names.each do |sa_key_name|
describe
end
Properties
Properties that can be accessed from the google_iam_service_account_key
resource:
name
: The name of the key.private_key_type
: Output format for the service account key.key_algorithm
: Specifies the algorithm for the key.private_key_data
: Private key data. Base-64 encoded.public_key_data
: Public key data. Base-64 encoded.valid_after_time
: Key can only be used after this time.valid_before_time
: Key can only be used before this time.key_type
: Specifies the type of the key. Possible values include KEYTYPEUNSPECIFIED, USERMANAGED and SYSTEMMANAGEDservice_account
: The name of the serviceAccount.path
: The full name of the file that will hold the service account private key. The management of this file will depend on the value of sync_file parameter. File path must be absolute.
GCP Permissions
Ensure the Identity and Access Management (IAM) API is enabled for the current project.