Add service_account output, look up when testing zonal clusters

Author: adrienthebo

autogen/outputs.tf

@@ -107,3 +107,8 @@ output "node_pools_versions" {
   description = "List of node pools versions"
   value       = "${local.cluster_node_pools_versions}"
 }
+
+output "service_account" {
+  description = "The service account to default running nodes as if not overridden in `node_pools`."
+  value = "${local.service_account}"
+}

modules/private-cluster/outputs.tf

@@ -106,4 +106,9 @@ output "node_pools_names" {
 output "node_pools_versions" {
   description = "List of node pools versions"
   value       = "${local.cluster_node_pools_versions}"
+}
+
+output "service_account" {
+  description = "The service account to default running nodes as if not overridden in `node_pools`."
+  value = "${local.service_account}"
 }

outputs.tf

@@ -106,4 +106,9 @@ output "node_pools_names" {
 output "node_pools_versions" {
   description = "List of node pools versions"
   value       = "${local.cluster_node_pools_versions}"
+}
+
+output "service_account" {
+  description = "The service account to default running nodes as if not overridden in `node_pools`."
+  value = "${local.service_account}"
 }

test/integration/simple_zonal/controls/gcloud.rb

@@ -15,6 +15,7 @@
 project_id = attribute('project_id')
 location = attribute('location')
 cluster_name = attribute('cluster_name')
+service_account = attribute('service_account')
 
 credentials_path = attribute('credentials_path')
 ENV['CLOUDSDK_AUTH_CREDENTIAL_FILE_OVERRIDE'] = credentials_path
@@ -83,7 +84,7 @@
         expect(node_pools).to include(
           including(
             "config" => including(
-              "serviceAccount" => starting_with("tf-gke-simple-zonal-cluster@"),
+              "serviceAccount" => service_account,
             ),
           ),
         )

test/integration/simple_zonal/inspec.yml

@@ -21,3 +21,6 @@ attributes:
   - name: client_token
     required: true
     type: string
+  - name: service_account
+    required: true
+    type: string