Add Artifact registry Service Identity SA creation.

modules/project/service-accounts.tf

@@ -67,6 +67,7 @@ locals {
     }
   )
   service_accounts_jit_services = [
+    "artifactregistry.googleapis.com",
     "cloudasset.googleapis.com",
     "gkehub.googleapis.com",
     "pubsub.googleapis.com",

tests/blueprints/gke/binauthz/test_plan.py

@@ -16,4 +16,4 @@ def test_resources(e2e_plan_runner):
   "Test that plan works and the numbers of resources is as expected."
   modules, resources = e2e_plan_runner()
   assert len(modules) == 13
-  assert len(resources) == 42
+  assert len(resources) == 43