source envs.sh
gcloud iam service-accounts create terraform \
--display-name "Terraform admin account"
gcloud projects add-iam-policy-binding ${PROJECT} \
--member serviceAccount:terraform@${PROJECT}.iam.gserviceaccount.com \
--role roles/editor
gcloud iam service-accounts keys create key.json \
--iam-account terraform@${PROJECT}.iam.gserviceaccount.com