Fix service account names to be <= 30 characters long

Author: BSick7

CHANGELOG.md

@@ -1,3 +1,13 @@
+# 0.7.6 (Dec 17, 2024)
+* Truncate image pusher service account name so it's less than max allowed of 30 characters.
+* Fix deployer service account name so it's less than max allowed of 30 characters.
+
+# 0.7.5 (Dec 09, 2024)
+* Remove unnecessary permissions to read from artifact registry.
+
+# 0.7.4 (Dec 09, 2024)
+* Fix service account to read from artifact registry.
+
 # 0.7.3 (Dec 06, 2024)
 * Create unique name for artifact repo member.
 

deployer.tf

@@ -1,6 +1,6 @@
 locals {
-  truncated_len = min(length(local.block_ref), 28 - length("deployer--12345"))
-  deployer_name = "deployer-${substr(local.block_ref, 0, local.truncated_len)}-${random_string.resource_suffix.result}"
+  max_deployer_name_len = 30 - length("deployer--12345")
+  deployer_name         = "deployer-${substr(local.block_ref, 0, local.max_deployer_name_len)}-${random_string.resource_suffix.result}"
 }
 
 resource "google_service_account" "deployer" {

pusher.tf

@@ -1,5 +1,10 @@
+locals {
+  max_pusher_name_len = 30 - length("pusher--12345")
+  pusher_name         = "pusher-${substr(local.block_ref, 0, local.max_pusher_name_len)}-${random_string.resource_suffix.result}"
+}
+
 resource "google_service_account" "image_pusher" {
-  account_id   = "pusher-${local.resource_name}"
+  account_id   = local.pusher_name
   display_name = "Image Pusher for ${local.app_name}"
 }