feat!: hardcode create_project_sa to false

README.md

@@ -48,7 +48,6 @@ For the cloudbuild submodule, see the README [cloudbuild](./modules/cloudbuild).
 |------|-------------|------|---------|:--------:|
 | activate\_apis | List of APIs to enable in the seed project. | `list(string)` | <pre>[<br>  "serviceusage.googleapis.com",<br>  "servicenetworking.googleapis.com",<br>  "compute.googleapis.com",<br>  "logging.googleapis.com",<br>  "bigquery.googleapis.com",<br>  "cloudresourcemanager.googleapis.com",<br>  "cloudbilling.googleapis.com",<br>  "iam.googleapis.com",<br>  "admin.googleapis.com",<br>  "appengine.googleapis.com",<br>  "storage-api.googleapis.com",<br>  "monitoring.googleapis.com"<br>]</pre> | no |
 | billing\_account | The ID of the billing account to associate projects with. | `string` | n/a | yes |
-| create\_project\_sa | Whether the default service account for the project shall be created | `bool` | `false` | no |
 | default\_region | Default region to create resources where applicable. | `string` | `"us-central1"` | no |
 | encrypt\_gcs\_bucket\_tfstate | Encrypt bucket used for storing terraform state files in seed project. | `bool` | `false` | no |
 | folder\_id | The ID of a folder to host this project | `string` | `""` | no |

main.tf

@@ -64,7 +64,7 @@ module "seed_project" {
   org_id                      = local.seed_org_depends_on
   billing_account             = var.billing_account
   activate_apis               = local.activate_apis
-  create_project_sa           = var.create_project_sa
+  create_project_sa           = false
   labels                      = var.project_labels
 }
 

variables.tf

@@ -198,8 +198,3 @@ variable "kms_prevent_destroy" {
   description = "Set the prevent_destroy lifecycle attribute on keys."
   default     = true
 }
-
-variable "create_project_sa" {
-  description = "Whether the default service account for the project shall be created"
-  default     = false
-}