google_iam_workload_identity_pool requires explicit project argument to be specified

[paololazzari]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
• Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
• If you are interested in working on this issue or have submitted a pull request, please leave a comment.
• If an issue is assigned to a user, that user is claiming responsibility for the issue.
• Customers working with a Google Technical Account Manager or Customer Engineer can ask them to reach out internally to expedite investigation and resolution of this issue.

Terraform Version

Terraform v1.7.2
on darwin_arm64

• provider registry.terraform.io/hashicorp/google v5.25.0

Affected Resource(s)

google_iam_workload_identity_pool

Terraform Configuration

This configuration:

resource "google_iam_workload_identity_pool" "github_identity_pool" {
  workload_identity_pool_id = "github-pool"
  display_name              = "GitHub Actions Pool"
  disabled                  = false
}

results in:

Error: Error creating WorkloadIdentityPool: googleapi: Error 403: Permission 'iam.workloadIdentityPools.create' denied on resource '//iam.googleapis.com/projects/myprojectid/locations/global' (or it may not exist).

whereas this works:

resource "google_iam_workload_identity_pool" "github_identity_pool" {
  workload_identity_pool_id = "github-pool"
  display_name              = "GitHub Actions Pool"
  disabled                  = false
  project                   = "myprojectid"
}

[ggtisc]

Hi @paololazzari!

This issue was replicated in both ways and the results were successfully without errors with the terraform version and Google version provided.

The project is an attribute that you need to have in your terraform configuration to work with terraform resources, it may be declared in different ways. If your SDK isn't recognizing it you may check your environment to see how it is declared. You can learn more in this link