Merge b103f42e14 into 99ac225a1a

plugins/doc_fragments/gcp.py

@@ -21,7 +21,7 @@ options:
             - The type of credential used.
         type: str
         required: true
-        choices: [ application, machineaccount, serviceaccount ]
+        choices: [ application, machineaccount, serviceaccount, impersonation ]
     service_account_contents:
         description:
             - The contents of a Service Account JSON file, either in a dictionary or as a JSON string that represents it.

plugins/inventory/gcp_compute.py

@@ -61,7 +61,7 @@ DOCUMENTATION = """
             description:
                 - The type of credential used.
             required: True
-            choices: ['application', 'serviceaccount', 'machineaccount', 'accesstoken']
+            choices: ['application', 'serviceaccount', 'machineaccount', 'accesstoken', 'impersonation']
             env:
                 - name: GCP_AUTH_KIND
         scopes:
@@ -89,6 +89,7 @@ DOCUMENTATION = """
             description:
                 - An optional service account email address if machineaccount is selected
                   and the user does not wish to use the default email.
+                - Required service account to impersonate if impersonation is selected.
             env:
                 - name: GCP_SERVICE_ACCOUNT_EMAIL
         access_token:

plugins/module_utils/gcp_utils.py

@@ -17,6 +17,7 @@ except ImportError:
 try:
     import google.auth
     import google.auth.compute_engine
+    import google.auth.impersonated_credentials
     from google.oauth2 import service_account, credentials as oauth2
     from google.auth.transport.requests import AuthorizedSession
     HAS_GOOGLE_LIBRARIES = True
@@ -200,9 +201,9 @@ class GcpSession(object):
         if not HAS_GOOGLE_LIBRARIES:
             self.module.fail_json(msg="Please install the google-auth library")
 
-        if self.module.params.get('service_account_email') is not None and self.module.params['auth_kind'] != 'machineaccount':
+        if self.module.params.get('service_account_email') is not None and not self.module.params['auth_kind'] in ['machineaccount','impersonation']:
             self.module.fail_json(
-                msg="Service Account Email only works with Machine Account-based authentication"
+                msg="Service Account Email only works with Impersonation and Machine Account-based authentication"
             )
 
         if (self.module.params.get('service_account_file') is not None or
@@ -261,6 +262,20 @@ class GcpSession(object):
                 )
             return oauth2.Credentials(access_token, scopes=self.module.params['scopes'])
         
+        if cred_type == 'impersonation':
+            service_account_email = self.module.params.get('service_account_email')
+            if service_account_email is None:
+                self.module.fail_json(
+                        msg='Service Account impersonation authentication requires setting service_account_email'
+                )
+            source_credentials, _ = google.auth.default()
+            return google.auth.impersonated_credentials.Credentials(
+                source_credentials=source_credentials,
+                target_principal=self.module.params['service_account_email'],
+                target_scopes=self.module.params['scopes'],
+                lifetime=3600,
+                )
+
         self.module.fail_json(msg="Credential type '%s' not implemented" % cred_type)
 
     def _headers(self):
@@ -291,7 +306,7 @@ class GcpModule(AnsibleModule):
                 auth_kind=dict(
                     required=True,
                     fallback=(env_fallback, ['GCP_AUTH_KIND']),
-                    choices=['machineaccount', 'serviceaccount', 'accesstoken', 'application'],
+                    choices=['machineaccount', 'serviceaccount', 'accesstoken', 'application', 'impersonation'],
                     type='str'),
                 service_account_email=dict(
                     required=False,

plugins/modules/gcp_appengine_firewall_rule.py

@@ -88,6 +88,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -101,6 +102,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_appengine_firewall_rule_info.py

@@ -53,6 +53,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -66,6 +67,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_bigquery_dataset.py

@@ -225,6 +225,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -238,6 +239,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_bigquery_dataset_info.py

@@ -53,6 +53,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -66,6 +67,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_bigquery_table.py

@@ -479,6 +479,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -492,6 +493,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_bigquery_table_info.py

@@ -71,6 +71,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_bigtable_instance.py

@@ -118,6 +118,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -131,6 +132,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_bigtable_instance_info.py

@@ -53,6 +53,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -66,6 +67,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_cloudbuild_trigger.py

@@ -728,6 +728,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -741,6 +742,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_cloudbuild_trigger_info.py

@@ -53,6 +53,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -66,6 +67,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_cloudfunctions_cloud_function.py

@@ -175,6 +175,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -188,6 +189,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_cloudfunctions_cloud_function_info.py

@@ -58,6 +58,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -71,6 +72,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_cloudscheduler_job.py

@@ -311,6 +311,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -324,6 +325,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_cloudscheduler_job_info.py

@@ -58,6 +58,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -71,6 +72,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_cloudtasks_queue.py

@@ -189,6 +189,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -202,6 +203,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_cloudtasks_queue_info.py

@@ -58,6 +58,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -71,6 +72,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_address.py

@@ -154,6 +154,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -167,6 +168,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_address_info.py

@@ -66,6 +66,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -79,6 +80,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_autoscaler.py

@@ -261,6 +261,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -274,6 +275,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_autoscaler_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_backend_bucket.py

@@ -175,6 +175,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -188,6 +189,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_backend_bucket_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_backend_service.py

@@ -709,6 +709,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -722,6 +723,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_backend_service_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_disk.py

@@ -239,6 +239,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -252,6 +253,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_disk_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_external_vpn_gateway.py

@@ -105,6 +105,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -118,6 +119,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_external_vpn_gateway_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_firewall.py

@@ -264,6 +264,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -277,6 +278,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_firewall_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_forwarding_rule.py

@@ -238,6 +238,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -251,6 +252,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_forwarding_rule_info.py

@@ -66,6 +66,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -79,6 +80,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_global_address.py

@@ -125,6 +125,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -138,6 +139,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_global_address_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_global_forwarding_rule.py

@@ -218,6 +218,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -231,6 +232,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_global_forwarding_rule_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_health_check.py

@@ -472,6 +472,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -485,6 +486,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_health_check_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_http_health_check.py

@@ -126,6 +126,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -139,6 +140,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_http_health_check_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_https_health_check.py

@@ -123,6 +123,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -136,6 +137,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_https_health_check_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_image.py

@@ -230,6 +230,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -243,6 +244,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_image_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_instance.py

@@ -523,6 +523,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -536,6 +537,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_instance_group.py

@@ -139,6 +139,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -152,6 +153,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_instance_group_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_instance_group_manager.py

@@ -137,6 +137,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -150,6 +151,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_instance_group_manager_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_instance_info.py

@@ -69,6 +69,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -82,6 +83,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_instance_template.py

@@ -486,6 +486,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -499,6 +500,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_instance_template_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_interconnect_attachment.py

@@ -195,6 +195,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -208,6 +209,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_interconnect_attachment_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_network.py

@@ -109,6 +109,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -122,6 +123,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_network_endpoint_group.py

@@ -125,6 +125,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -138,6 +139,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_network_endpoint_group_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_network_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_node_group.py

@@ -142,6 +142,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -155,6 +156,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_node_group_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_node_template.py

@@ -136,6 +136,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -149,6 +150,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_node_template_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_autoscaler.py

@@ -238,6 +238,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -251,6 +252,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_autoscaler_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_backend_service.py

@@ -720,6 +720,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -733,6 +734,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_backend_service_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_disk.py

@@ -177,6 +177,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -190,6 +191,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_disk_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_health_check.py

@@ -472,6 +472,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -485,6 +486,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_health_check_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_instance_group_manager.py

@@ -155,6 +155,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -168,6 +169,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_instance_group_manager_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_target_http_proxy.py

@@ -93,6 +93,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -106,6 +107,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_target_http_proxy_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_target_https_proxy.py

@@ -101,6 +101,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -114,6 +115,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_target_https_proxy_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_url_map.py

@@ -1590,6 +1590,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -1603,6 +1604,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_region_url_map_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_reservation.py

@@ -162,6 +162,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -175,6 +176,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_reservation_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_resource_policy.py

@@ -275,6 +275,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -288,6 +289,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_resource_policy_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_route.py

@@ -175,6 +175,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -188,6 +189,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_route_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_router.py

@@ -142,6 +142,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -155,6 +156,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_router_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_snapshot.py

@@ -158,6 +158,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -171,6 +172,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_snapshot_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_ssl_certificate.py

@@ -90,6 +90,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -103,6 +104,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_ssl_certificate_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_ssl_policy.py

@@ -100,6 +100,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -113,6 +114,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_ssl_policy_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_subnetwork.py

@@ -152,6 +152,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -165,6 +166,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_subnetwork_info.py

@@ -65,6 +65,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -78,6 +79,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_target_http_proxy.py

@@ -94,6 +94,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -107,6 +108,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_target_http_proxy_info.py

@@ -60,6 +60,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -73,6 +74,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description:

plugins/modules/gcp_compute_target_https_proxy.py

@@ -122,6 +122,7 @@ options:
     - machineaccount
     - serviceaccount
     - accesstoken
+    - impersonation
   service_account_contents:
     description:
     - The contents of a Service Account JSON file, either in a dictionary or as a
@@ -135,6 +136,7 @@ options:
     description:
     - An optional service account email address if machineaccount is selected and
       the user does not wish to use the default email.
+    - Required service account to impersonate if impersonation is selected.
     type: str
   access_token:
     description: