* Create service identity if service is enabled * remove dry run mode * fix tests * Improve for_each logic