[DM Setup] When DM is created->deleted->created, VM SA binding is left around

[viglesiasce]

This is likely a bug in DM or the way we are setting up the IAM binding.

If you create the DM template and then delete it, the service account for the student VM is deleted but the role binding on the project still exists. When the deployment is created again the binding is not updated to point to the new SA (with the same name).

[viglesiasce]

To fix:

Delete the deployment->Delete the role binding in the projects IAM-> Recreate the deployment