This property is not correctly handled on the API - we can work around it here.

[modular-magician]

Original Author: @ndmckinley

compute: Added ability to set `quic_override` on `google_compute_https_target_proxy` to empty.

[knapo]

hey @ndmckinley!

After upgrading to 2.17.0, Terraform wants to set quic_override on existing resources and I started getting:

Error updating TargetHttpsProxy "....": googleapi: Error 403: Required 'compute.targetHttpsProxies.setQuicOverride' permission for ...

However I can't see compute.targetHttpsProxies.setQuicOverride role on GCP and my service account has all compute.targetHttpsProxies assigned.

Have you experienced such issue? thanks for the help

[nat-henderson]

I'm not terribly surprised that it wants to set it on existing resources, depending on what the state of those resources was. Mind posting your diff so I can make sure it's expected?

I'm not sure what to think about the permissions issue, I'll dig into that.

[nat-henderson]

Seems like a bug on the GCP side - that permission should be included in the existing roles, but no predefined role includes it. Let me see what can be done about that.

[knapo]

Mind posting your diff so I can make sure it's expected?

Sure:

[nat-henderson]

Thanks! I consider that expected, but I see that it's causing problems since you can't find the permission you need to be able to make that change. I'll keep digging on that.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!