Error: Error setting IAM policy for project "xxxxx": googleapi: Error 400: Request contains an invalid argument., badRequest

coffer-msk commented 4 years ago

Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
If you are interested in working on this issue or have submitted a pull request, please leave a comment.
If an issue is assigned to the modular-magician user, it is either in the process of being autogenerated, or is planned to be autogenerated soon. If an issue is assigned to a user, that user is claiming responsibility for the issue. If an issue is assigned to hashibot, a community member has claimed the issue already.

Terraform Version

Terraform v0.12.26
provider.google v3.23.0

Affected Resource(s)

google_XXXXX

Terraform Configuration Files

provider "google" {
  credentials = "${file("credentials.json")}"
  project = "xxxxx"
  region = "europe-west3"
}
resource "google_service_account" "compute-sa" {
    account_id   = "compute-sa"
    display_name = "Compute Service Account"
}
resource "google_project_iam_policy" "my_project" {
  project     = data.google_project.test_project.project_id
  policy_data = data.google_iam_policy.auth1.policy_data
}
data "google_project" "test_project" {}
data "google_iam_policy" "auth1" {
  binding {
    role = "roles/cloudsql.admin"
    members = [
      "serviceAccount:${google_service_account.compute-sa.email}",
    ]
  }
  binding {
    role = "roles/secretmanager.secretAccessor"
    members = [
      "serviceAccount:${google_service_account.compute-sa.email}",
    ]
  }
  binding {
    role = "roles/datastore.owner"
    members = [
      "serviceAccount:${google_service_account.compute-sa.email}",
    ]
  }
  binding {
    role = "roles/storage.admin"
    members = [
      "serviceAccount:${google_service_account.compute-sa.email}",
    ]
  }
}

Debug Output

2020/06/01 21:47:13 [INFO] backend/local: apply calling Apply 2020/06/01 21:47:13 [INFO] terraform: building graph: GraphTypeApply 2020/06/01 21:47:13 [DEBUG] Resource state not found for node "google_project_iam_policy.my_project", instance google_project_iam_policy.my_project 2020/06/01 21:47:13 [DEBUG] ProviderTransformer: "data.google_iam_policy.auth1 (prepare state)" (terraform.NodeApplyableResource) needs provider.google 2020/06/01 21:47:13 [DEBUG] ProviderTransformer: "google_service_account.compute-sa (prepare state)" (terraform.NodeApplyableResource) needs provider.google 2020/06/01 21:47:13 [DEBUG] ProviderTransformer: "google_project_iam_policy.my_project (prepare state)" (terraform.NodeApplyableResource) needs provider.google 2020/06/01 21:47:13 [DEBUG] ProviderTransformer: "data.google_project.test_project (prepare state)" (terraform.NodeApplyableResource) needs provider.google 2020/06/01 21:47:13 [DEBUG] ReferenceTransformer: "data.google_project.test_project (prepare state)" references: [] 2020/06/01 21:47:13 [DEBUG] ReferenceTransformer: "data.google_iam_policy.auth1 (prepare state)" references: [] 2020/06/01 21:47:13 [DEBUG] ReferenceTransformer: "google_project_iam_policy.my_project" references: [data.google_iam_policy.auth1 (prepare state) data.google_project.test_project (prepare state)] 2020/06/01 21:47:13 [DEBUG] ReferenceTransformer: "output.check_data" references: [data.google_iam_policy.auth1 (prepare state)] 2020/06/01 21:47:13 [DEBUG] ReferenceTransformer: "output.project_number" references: [data.google_project.test_project (prepare state)] 2020/06/01 21:47:13 [DEBUG] ReferenceTransformer: "provider.google" references: [] 2020/06/01 21:47:13 [DEBUG] ReferenceTransformer: "google_service_account.compute-sa (prepare state)" references: [] 2020/06/01 21:47:13 [DEBUG] ReferenceTransformer: "google_project_iam_policy.my_project (prepare state)" references: [] 2020/06/01 21:47:13 [DEBUG] Starting graph walk: walkApply 2020-06-01T21:47:13.679+0300 [INFO] plugin: configuring client automatic mTLS 2020-06-01T21:47:13.708+0300 [DEBUG] plugin: starting plugin: path="/mnt/d/project/temp/google-iam-role/.terraform/plugins/linux_amd64/terraform-provider-google_v3.23.0_x5" args=["/mnt/d/project/temp/google-iam-role/.terraform/plugins/linux_amd64/terraform-provider-google_v3.23.0_x5"] 2020-06-01T21:47:14.165+0300 [DEBUG] plugin: plugin started: path="/mnt/d/project/temp/google-iam-role/.terraform/plugins/linux_amd64/terraform-provider-google_v3.23.0_x5" pid=24439 2020-06-01T21:47:14.165+0300 [DEBUG] plugin: waiting for RPC address: path="/mnt/d/project/temp/google-iam-role/.terraform/plugins/linux_amd64/terraform-provider-google_v3.23.0_x5" 2020-06-01T21:47:14.189+0300 [INFO] plugin.terraform-provider-google_v3.23.0_x5: configuring server automatic mTLS: timestamp=2020-06-01T21:47:14.188+0300 2020-06-01T21:47:14.219+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: plugin address: address=/tmp/plugin826559990 network=unix timestamp=2020-06-01T21:47:14.219+0300 2020-06-01T21:47:14.219+0300 [DEBUG] plugin: using plugin: version=5 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Authenticating using configured Google JSON 'credentials'... 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] -- Scopes: [https://www.googleapis.com/auth/compute https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/ndev.clouddns.readwrite https://www.googleapis.com/auth/devstorage.full_control https://www.googleapis.com/auth/userinfo.email] 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating GCE client for path https://www.googleapis.com/compute/v1/projects/ 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating GCE Beta client for path https://www.googleapis.com/compute/beta/projects/ 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating GKE client for path https://container.googleapis.com/ 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating GKE Beta client for path https://container.googleapis.com/ 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud DNS client for path https://www.googleapis.com/dns/v1/projects/ 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud DNS Beta client for path https://www.googleapis.com/dns/v1beta2/projects/ 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud KMS client for path https://cloudkms.googleapis.com/ 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Stackdriver Logging client for path https://logging.googleapis.com/ 2020-06-01T21:47:14.306+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Storage client for path https://www.googleapis.com/storage/v1/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google SqlAdmin client for path https://sqladmin.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Pubsub client for path https://pubsub.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Dataflow client for path https://dataflow.googleapis.com/ google_project_iam_policy.my_project: Creating... 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud ResourceManager client for path https://cloudresourcemanager.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud ResourceManager V client for path https://cloudresourcemanager.googleapis.com/ v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Runtimeconfig client for path https://runtimeconfig.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud IAM client for path https://iam.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud IAMCredentials client for path https://iamcredentials.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Service Management client for path https://servicemanagement.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Service Usage client for path https://serviceusage.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Billing client for path https://cloudbilling.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Build client for path https://cloudbuild.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud BigQuery client for path https://www.googleapis.com/bigquery/v2/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud CloudFunctions Client for path https://cloudfunctions.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud BigtableAdmin for path https://bigtableadmin.googleapis.com/ ntiating Google Cloud Source Repo client for path https://sourcerepo.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Spanner client for path https://spanner.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Dataproc client for path https://dataproc.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Dataproc Beta client for path https://dataproc.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Filestore client for path https://file.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud IoT Core client for path https://cloudiot.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating App Engine client for path https://appengine.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Cloud Composer client for path https://composer.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Service Networking client for path https://servicenetworking.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Storage Transfer client for path https://storagetransfer.googleapis.com/ 2020-06-01T21:47:14.307+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [INFO] Instantiating Google Cloud Healthcare client for path https://healthcare.googleapis.com/ [walkApply] Exiting eval tree: provider.google 2020-06-01T21:47:14.310+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [ERROR] Could not unmarshal old policy : unexpected end of JSON input 2020/06/01 21:47:14 [DEBUG] google_project_iam_policy.my_project: applying the planned Create change 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [ERROR] Could not unmarshal old policy : unexpected end of JSON input 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [DEBUG] Retry Transport: starting RoundTrip retry loop 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [DEBUG] Retry Transport: request attempt 0 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [DEBUG] Google API Request Details: 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ---[ REQUEST ]--------------------------------------- 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: POST /v1/projects/proud-effect-275011:setIamPolicy?alt=json&prettyPrint=false HTTP/1.1 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Host: cloudresourcemanager.googleapis.com 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: User-Agent: google-api-go-client/0.5 HashiCorp Terraform/0.12.24 (+https://www.terraform.io) Terraform Plugin SDK/1.11.0 terraform-provider-google/3.23.0 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Content-Length: 558 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Content-Type: application/json o/1.13.4 gdcl/20200503 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Accept-Encoding: gzip 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "policy": { 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "bindings": [ 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [ 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "serviceAccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com" 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "role": "roles/cloudsql.admin" 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }, 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [ 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "serviceAccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com" 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-01T21:47:14.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "role": "roles/datastore.owner" 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }, 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [ ccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com" 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "role": "roles/secretmanager.secretAccessor" 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }, 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [ 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "serviceAccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com" 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "role": "roles/storage.admin" 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: } 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "version": 3 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }, 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "updateMask": "bindings,etag,auditConfigs" 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: } 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ----------------------------------------------------- 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:20 [DEBUG] Google API Response Details: 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ---[ RESPONSE ]-------------------------------------- 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: HTTP/1.1 400 Bad Request 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Connection: close 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Transfer-Encoding: chunked 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Alt-Svc: h3-27=":443"; ma=2592000,h3-25=":443"; ma=2592000,h3-T050=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q049=":443"; ma=2592000,h3-Q048=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Cache-Control: private 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Content-Type: application/json; charset=UTF-8 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Date: Mon, 01 Jun 2020 18:47:21 GMT 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Server: ESF 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Server-Timing: gfet4t7; dur=859 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Vary: Origin 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Vary: X-Origin 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Vary: Referer 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: X-Content-Type-Options: nosniff 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: X-Frame-Options: SAMEORIGIN 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: X-Xss-Protection: 0 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 11d 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "error": { 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "code": 400, 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "message": "Request contains an invalid argument.", 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "errors": [ 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "message": "Request contains an invalid argument.", 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "domain": "global", 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "reason": "badRequest" 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: } 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "status": "INVALID_ARGUMENT" 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }

21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: } 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 0 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ----------------------------------------------------- 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:20 [DEBUG] Retry Transport: Stopping retries, last request failed with non-retryable error: googleapi: got HTTP response code 400 with body: HTTP/1.1 400 Bad Request 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Connection: close 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Transfer-Encoding: chunked 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Alt-Svc: h3-27=":443"; ma=2592000,h3-25=":443"; ma=2592000,h3-T050=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q049=":443"; ma=2592000,h3-Q048=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Cache-Control: private 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Content-Type: application/json; charset=UTF-8 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Date: Mon, 01 Jun 2020 18:47:21 GMT 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Server: ESF 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Server-Timing: gfet4t7; dur=859 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Vary: Origin Error: Error setting IAM policy for project "proud-effect-275011": googleapi: Error 400: Request contains an invalid argument., badRequest gin.terraform-provider-google_v3.23.0_x5: Vary: X-Origin 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Vary: Referer 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: X-Content-Type-Options: nosniff 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: X-Frame-Options: SAMEORIGIN 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: X-Xss-Protection: 0 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 11d 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "error": { 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "code": 400, 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "message": "Request contains an invalid argument.", 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "errors": [ 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "message": "Request contains an invalid argument.", 2020-06-01T21:47:20.960+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "domain": "global", 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "reason": "badRequest" 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: } 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "status": "INVALID_ARGUMENT" 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }

rm-provider-google_v3.23.0_x5: } 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 0 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-01T21:47:20.961+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:20 [DEBUG] Retry Transport: Returning after 1 attempts 2020/06/01 21:47:20 [DEBUG] google_project_iam_policy.my_project: apply errored, but we're indicating that via the Error pointer rather than returning it: Error setting IAM policy for project "proud-effect-275011": googleapi: Error 400: Request contains an invalid argument., badRequest 2020/06/01 21:47:20 [ERROR] : eval: *terraform.EvalSequence, err: Error setting IAM policy for project "proud-effect-275011": googleapi: Error 400: Request contains an invalid argument., badRequest on main.tf line 5, in resource "google_project_iam_policy" "my_project": 2020-06-01T21:47:20.971+0300 [DEBUG] plugin: plugin process exited: path="/mnt/d/EPAM project/temp/google-iam-role/.terraform/plugins/linux_amd64/terraform-provider-google_v3.23.0_x5" pid=24439 2020-06-01T21:47:20.971+0300 [DEBUG] plugin: plugin exited 5: resource "google_project_iam_policy" "my_project" {

Panic Output

Expected Behavior

google_service_account_iam_policy: Authoritative. Sets the IAM policy for the service account and replaces any existing policy already attached.

Actual Behavior

Steps to Reproduce

terraform apply

Important Factoids

References

0000

edwardmedia commented 4 years ago

@coffer-msk I noticed below section in your log. It seems the member is not valid. Do you have any clue what happened?

2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: {
2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [
ccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com"
2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ],
2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "role": "roles/secretmanager.secretAccessor"
2020-06-01T21:47:14.312+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: },

Also there is an error in the log

2020-06-01T21:47:14.310+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [ERROR] Could not unmarshal old policy : unexpected end of JSON input

Our tests works. Do you have specific steps for me to repro it?

coffer-msk commented 4 years ago

@edwardmedia I think this is the way console shows the log : 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Content-Length: 558 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Content-Type: application/json 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: X-Goog-Api-Client: gl-go/1.13.4 gdcl/20200503 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: Accept-Encoding: gzip 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "policy": { 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "bindings": [ 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [ 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "serviceAccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], "roles/cloudsql.admin" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }, 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [ 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "serviceAccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "role": "roles/datastore.owner" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }, 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [ 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "serviceAccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "role": "roles/secretmanager.secretAccessor" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }, 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: { 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "members": [ 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "serviceAccount:compute-sa@proud-effect-275011.iam.gserviceaccount.com" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "role": "roles/storage.admin" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: } -02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: ], 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "version": 3 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: }, 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: "updateMask": "bindings,etag,auditConfigs" 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: } 2020-06-02T09:57:00.311+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5:

Can you use my terraform code with your project and you credetials for tests.

2020-06-01T21:47:14.310+0300 [DEBUG] plugin.terraform-provider-google_v3.23.0_x5: 2020/06/01 21:47:14 [ERROR] Could not unmarshal old policy : unexpected end of JSON input About this erro I can't find clear explanation of what's wrong

edwardmedia commented 4 years ago

@coffer-msk here is the test conducted daily for google_project_iam_policy. https://github.com/terraform-providers/terraform-provider-google/blob/aecf30abcb81f93f601a23ea5ab4a26f3be6b44e/google/resource_google_project_iam_policy_test.go#L233

Under the expected behavior section, you referred to google_service_account_iam_policy: Which resource were you testing?

edwardmedia commented 4 years ago

@coffer-msk I am closing this issue at this moment. Please feel free to reopen it if this is still an issue with you. In the meantime, please provide the steps so I can repro the issue. Thank you.

ghost commented 4 years ago

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!

hashicorp / terraform-provider-google