feat(core_project_factor): enable setting a description for the default service account

main.tf

@@ -45,6 +45,7 @@ module "project-factory" {
   folder_id                          = var.folder_id
   create_project_sa                  = var.create_project_sa
   project_sa_name                    = var.project_sa_name
+  project_sa_description             = var.project_sa_description
   sa_role                            = var.sa_role
   activate_apis                      = var.activate_apis
   activate_api_identities            = var.activate_api_identities

modules/core_project_factory/main.tf

@@ -153,6 +153,7 @@ resource "google_service_account" "default_service_account" {
   count                        = var.create_project_sa ? 1 : 0
   account_id                   = var.project_sa_name
   display_name                 = "${var.name} Project Service Account"
+  description                  = var.project_sa_description
   project                      = google_project.main.project_id
   create_ignore_already_exists = true
 }

modules/core_project_factory/variables.tf

@@ -96,6 +96,12 @@ variable "project_sa_name" {
   default     = "project-service-account"
 }
 
+variable "project_sa_description" {
+  description = "Description to set for the project default service account."
+  type        = string
+  default     = null
+}
+
 variable "sa_role" {
   description = "A role to give the default Service Account for the project (defaults to none)"
   type        = string

variables.tf

@@ -96,6 +96,12 @@ variable "project_sa_name" {
   default     = "project-service-account"
 }
 
+variable "project_sa_description" {
+  description = "Description to set for the project default service account."
+  type        = string
+  default     = null
+}
+
 variable "sa_role" {
   description = "A role to give the default Service Account for the project (defaults to none)"
   type        = string