title: GCP Pub/Sub default service account is not getting created when enabling the API
body: <p>We have two projects in our GCP account; one for our Dev environment and one for our Test environment at the moment. Terraform manages most of our infrastructure, so we have minimal clicking around the GUI, or CLI commands.</p>
  <p>I have assumed we enabled the Pub/Sub API by deploying to it with Terraform in both of our environments, although we may have needed to do this manually. We noticed that Google created a default Pub/Sub service account for us in our Dev environment, but not in our Test environment. <a href="https://cloud.google.com/pubsub/docs/push#setting_up_for_push_authentication" rel="nofollow noreferrer">This docs page suggests it should make this service account</a>.</p>
  <p>Additionally, we have noticed multiple Pub/Sub subscriptions working, apparently without any service account. We believe that the service account is only needed for this particular Subscription because it is a push to an e-mail server. Therefore, it needs a service account with the  'Service Account Token Creator' role.</p>
  <p>We've attempted to redeploy the whole infrastructure and disable/re-enable the Pub/Sub API. Neither seemed to kick GCP into creating the Service Account. Further to this, we attempted to make the default service account manually. Still, GCP constrains the name a user can give a service account themselves, so we're unable to create a service account with the name that the Pub/Sub service would expect.</p>
  <p>We wonder if there is some configuration of the project we may have missed or if anyone has seen this previously?</p>