hey @ndmckinley!

After upgrading to 2.17.0, Terraform wants to set quic_override on existing resources and I started getting:

Error updating TargetHttpsProxy "....": googleapi: Error 403: Required 'compute.targetHttpsProxies.setQuicOverride' permission for ...

However I can't see compute.targetHttpsProxies.setQuicOverride role on GCP and my service account has all compute.targetHttpsProxies assigned.

Have you experienced such issue? thanks for the help

I'm not terribly surprised that it wants to set it on existing resources, depending on what the state of those resources was. Mind posting your diff so I can make sure it's expected?

I'm not sure what to think about the permissions issue, I'll dig into that.

Seems like a bug on the GCP side - that permission should be included in the existing roles, but no predefined role includes it. Let me see what can be done about that.

Mind posting your diff so I can make sure it's expected?

Sure:

Thanks! I consider that expected, but I see that it's causing problems since you can't find the permission you need to be able to make that change. I'll keep digging on that.

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!