Failing test(s): google_app_engine_flexible_app_version.service_account (permadiff)

[melinath]

Failure rate: 100% since Sept 3 2022

Impacted tests:

• TestAccComputeRegionNetworkEndpointGroup_regionNetworkEndpointGroupAppengineExample

Nightly builds:

• https://ci-oss.hashicorp.engineering/buildConfiguration/GoogleCloud_ProviderGoogleCloudGoogleProject/335482?buildTab=tests&expandedTest=5403825055001777426

Message:

Terraform will perform the following actions:
# google_app_engine_flexible_app_version.appengine_neg will be updated in-place
~ resource "google_app_engine_flexible_app_version" "appengine_neg" {
id                        = "apps/project-id/services/appengine-network-endpoint-group/versions/v1"
name                      = "apps/project-id/services/appengine-network-endpoint-group/versions/v1"
- service_account           = "project-id@appspot.gserviceaccount.com" -> null
# (9 unchanged attributes hidden)
~ handlers {
# (4 unchanged attributes hidden)
~ static_files {
+ http_headers          = {}
# (5 unchanged attributes hidden)
}
}
# (5 unchanged blocks hidden)
}
Plan: 0 to add, 1 to change, 0 to destroy.

[melinath]

This is almost certainly a bug in the implementation of GoogleCloudPlatform/magic-modules#6391 - attn @ranjithkumar-glean in case you want to take a stab at fixing it!

Probably what's happening is that the API is always returning a service account even if one isn't set, causing TF to try to unset it to match the config - the fix is likely to use default_from_api: https://github.com/GoogleCloudPlatform/magic-modules/blob/main/mmv1/README.md#terraformyaml

This is not a blocking bug since it doesn't cause a recreate.

[melinath]

b/247158627

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.