Importing existing GCP service account violates pulumi id regex.

I’m attempting to import an existing service account in GCP. The service account is created by default when enabling the Cloud Build api. The id of my default service account is 418715367700-compute. Attempting to set that value in go returns the following error:

Diagnostics:
  gcp:serviceAccount:Account (cloud-build):
    error: gcp:serviceAccount/account:Account resource 'cloud-build' has a problem: "account_id" ("418715367700-compute") doesn't match regexp "^[a-z](?:[-a-z0-9]{4,28}[a-z0-9])$"
    error: Preview failed: one or more inputs failed to validate

[aryehb]

This appears to still be an issue.

#361 is marked as fixing this issue, and this issue was closed as a result, but I believe that is a mistake, as I commented there. #361 fixes #359, and this issue is unrelated and should be re-opened.
@stack72 Can you confirm and re-open?

Are you certain that 418715367700-compute isn’t the name of the service account and it actually has some other ID? Otherwise, I don’t think the Google API would’ve let you create this in the first place?

The ID for the default service account for Compute Engine is {NUMERIC_PROJECT_ID}-compute, and is auto-generated by GCP.

It appears the GCP Terraform provider has the same issue. There’s a dedicated resource mentioned in a comment on that issue for the default Compute Engine service account (resource, source), which I presume doesn’t have the regular restrictions.

Pulumi has a dedicated function for returning the default service account. However, I can’t find a corresponding resource in the Pulumi documentation.

[mezhaka]

@mezhaka Did you try using google_compute_default_service_account instead?

Oh! I did not know about that. It did help. Thank you!