fix incorrect cloudservices agent email for global universe (#3402)

2025-10-12 13:13:50 +02:00
parent 6a79d0f74c
commit 8749683850
1 changed files with 11 additions and 4 deletions
--- a/modules/project/service-agents.tf
+++ b/modules/project/service-agents.tf
@@ -25,10 +25,17 @@ locals {
      (agent.name) => merge(agent, {
        email = (
          api == "cloudservices"
-          ? format(
-            "%s@cloudservices.%siam.gserviceaccount.com",
-            local.project.number,
-            local._u_domain
+          ? (
+            var.universe == null
+            ? format(
+              "%s@cloudservices.gserviceaccount.com",
+              local.project.number
+            )
+            : format(
+              "%s@cloudservices.%siam.gserviceaccount.com",
+              local.project.number,
+              local._u_domain
+            )
          )
          : (
            var.universe == null || !startswith(api, "cloudkms.")