terraform 计划时检索 IAM 策略 GCP 时出错？

Question

您好，我的 GCP terraform bootstrap 模块之一包含

  resource "google_organization_iam_member" "organizationAdmin" {
  for_each = toset(var.users)
  org_id   = var.organization_id
  role     = "roles/resourcemanager.organizationAdmin"
  member   = each.value

}

现在我得到

Error: Error retrieving IAM policy for organization "903021035085 ": googleapi: Error 400: Request contains an invalid argument., badRequest
│ 
│   with module.bootstrap_permissions.google_organization_iam_member.organizationAdmin["group:gcp-organization-admins@juliusoh.tech"],
│   on ../modules/bootstrap_permissions/main.tf line 1, in resource "google_organization_iam_member" "organizationAdmin":
│    1: resource "google_organization_iam_member" "organizationAdmin" {

提出请求的帐户在组织级别具有所有者权限，当我执行 terraform 计划时，是否有错误的原因。

Answer 1

var.organization_id的值有一个尾随空格（请参阅错误消息），例如， "123 "而不是"123" 。 删除这个空间，它应该可以工作。