resource.minio_iam_service_account ERROR "Policy, user or group names are not allowed to begin or end with space characters"

[horzone]

Description

When using Terraform to create a minio_iam_service_account resource, the following error occurs:

Error: [FATAL] error creating service account (test-user-name): Policy, user or group names are not allowed to begin or end with space characters

However, if the service account is created manually and then imported into the Terraform state, it works without issues.

Steps to Reproduce

1. Create a MinIO user named test-user-name using the minio_iam_user resource.
2. Create a policy named test-policy that grants full access to the test-bucket using the minio_iam_policy resource.
3. Attach the created policy to the user using the minio_iam_user_policy_attachment resource.
4. Attempt to create a service account for the user test-user-name using the minio_iam_service_account resource.

resource "minio_iam_user" "test_user" {
  name          = "test-user-name"
}

resource "minio_iam_policy" "test_policy" {
  name     = "test-policy"
  policy   = <<-EOF
      {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": [
                    "s3:*"
                ],
                "Resource": [
                    "arn:aws:s3:::test-bucket"
                ]
            },
            {
                "Effect": "Allow",
                "Action": [
                    "s3:*"
                ],
                "Resource": [
                    "arn:aws:s3:::test-bucket/*"
                ]
            }
        ]
      }
  EOF
}

resource "minio_iam_user_policy_attachment" "test_pol_at" {
  depends_on  = [resource.minio_iam_user.test_user, resource.minio_iam_policy.test_policy]
  user_name   = "test-user-name"
  policy_name = "test-policy"
}

resource "minio_iam_service_account" "test_sc" {
  depends_on  = [resource.minio_iam_user_policy_attachment.test_pol_at]
  target_user   = "test-user-name"
}

Expected behavior: The service account is created successfully without errors.

Actual behavior: The process fails with the error:

Reproduces how often: This issue occurs consistently on every run.

Versions

• MinIO Provider: 3.2.2
• MinIO Server: "RELEASE.2024-05-28T17-19-04Z"

Additional Information

• Creating the service account manually through the MinIO interface and importing it into Terraform works without issues.
• The problem occurs only when creating the service account via Terraform.
• Verified that user and policy names do not contain leading or trailing spaces.