Fix/dlpagent

[ddaluka]

When DLP API service is enabled for a project, we also need its service agent to be available for further IAM roles assignment.

dlp.googleapis.com API supports the identity creation using gcloud beta services identity create --service dlp.googleapis.com

---

Checklist

I applicable, I acknowledge that I have:

• Read the contributing guide
• Ran terraform fmt on all modified files
• Regenerated the relevant README.md files using tools/tfdoc.py
• Made sure all relevant tests pass

[wiktorn]

If you need to have DLP service agent force-created, add to service-agents.yaml:

jit: true

For DLP. Also, bare in mind, that services force-created may miss their role, in this case it will be roles/dlp.serviceAgent, so this is not a perfect solution.

[ddaluka]

If you need to have DLP service agent force-created, add to service-agents.yaml:

jit: true

For DLP. Also, bare in mind, that services force-created may miss their role, in this case it will be roles/dlp.serviceAgent, so this is not a perfect solution.

Thanks, I have removed the explicit identity creation block and have set jit as true . I guess , we can assign the service agent role if required once agent is available.

[wiktorn]

Thanks, I have removed the explicit identity creation block and have set jit as true . I guess , we can assign the service agent role if required once agent is available.

Yes, we have this documented here

Can you add DLP there too? Thanks.

[wiktorn]

@ddaluka There was still one blueprint tests that were failing due to this change, will you be able to fix that, or shall I help you with that?

[ddaluka]

@ddaluka There was still one blueprint tests that were failing due to this change, will you be able to fix that, or shall I help you with that?

Thanks. I have fixed the issue

[wiktorn]

Thank you for fixing those ❤️