workbench: Changed instance_owners field in the examples to not use a service account. (#11189) (#18802)

[upstream:420db9d89f2b7013c72f29146d5ea22d410a790c]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

.changelog/11189.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+workbench: Changed `instance_owners` field in the examples to not use a service account.
+```

google/services/workbench/resource_workbench_instance_generated_test.go

@@ -202,8 +202,6 @@ resource "google_workbench_instance" "instance" {
 
   }
 
-  instance_owners  = [ "%{service_account}"]
-
   labels = {
     k = "val"
   }
@@ -218,6 +216,7 @@ func TestAccWorkbenchInstance_workbenchInstanceFullExample(t *testing.T) {
 	t.Parallel()
 
 	context := map[string]interface{}{
+		"project_id":      envvar.GetTestProjectFromEnv(),
 		"service_account": envvar.GetTestServiceAccountFromEnv(t),
 		"key_name":        acctest.BootstrapKMSKeyInLocation(t, "us-central1").CryptoKey.Name,
 		"random_suffix":   acctest.RandString(t, 10),
@@ -259,6 +258,14 @@ resource "google_compute_address" "static" {
   name = "tf-test-wbi-test-default%{random_suffix}"
 }
 
+resource "google_service_account_iam_binding" "act_as_permission" {
+  service_account_id = "projects/%{project_id}/serviceAccounts/%{service_account}"
+  role               = "roles/iam.serviceAccountUser"
+  members = [
+    "user:[email protected]",
+  ]
+}
+
 resource "google_workbench_instance" "instance" {
   name = "tf-test-workbench-instance%{random_suffix}"
   location = "us-central1-a"
@@ -317,7 +324,7 @@ resource "google_workbench_instance" "instance" {
 
   disable_proxy_access = "true"
 
-  instance_owners  = [ "%{service_account}"]
+  instance_owners  = ["[email protected]"]
 
   labels = {
     k = "val"

website/docs/r/workbench_instance.html.markdown

@@ -110,8 +110,6 @@ resource "google_workbench_instance" "instance" {
 
   }
 
-  instance_owners  = [ "[email protected]"]
-
   labels = {
     k = "val"
   }
@@ -140,6 +138,14 @@ resource "google_compute_address" "static" {
   name = "wbi-test-default"
 }
 
+resource "google_service_account_iam_binding" "act_as_permission" {
+  service_account_id = "projects/my-project-name/serviceAccounts/[email protected]"
+  role               = "roles/iam.serviceAccountUser"
+  members = [
+    "user:[email protected]",
+  ]
+}
+
 resource "google_workbench_instance" "instance" {
   name = "workbench-instance"
   location = "us-central1-a"
@@ -198,7 +204,7 @@ resource "google_workbench_instance" "instance" {
 
   disable_proxy_access = "true"
 
-  instance_owners  = [ "my@service-account.com"]
+  instance_owners  = ["example@example.com"]
 
   labels = {
     k = "val"