google_iap_web_iam_member_web_access produce inconsistent result after apply

MrwanBaghdad commented 3 years ago

Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
Please do not leave +1 or me too comments, they generate extra noise for issue followers and do not help prioritize the request.
If you are interested in working on this issue or have submitted a pull request, please leave a comment.
If an issue is assigned to the modular-magician user, it is either in the process of being autogenerated, or is planned to be autogenerated soon. If an issue is assigned to a user, that user is claiming responsibility for the issue. If an issue is assigned to hashibot, a community member has claimed the issue already.

Terraform Version

Terraform v0.14.8 │~

provider registry.terraform.io/hashicorp/external v2.1.0 │~
provider registry.terraform.io/hashicorp/google v3.50.0 │~
provider registry.terraform.io/hashicorp/helm v2.0.3 │~
provider registry.terraform.io/hashicorp/kubernetes v1.13.3 │~
provider registry.terraform.io/hashicorp/null v3.1.0 │~
provider registry.terraform.io/hashicorp/random v3.1.0 │~ │~
Affected Resource(s)

google_iap_web_iam_member

Terraform Configuration Files

resource "google_iap_brand" "project_brand" {
  support_email     = var.project_brand.support_email
  application_title = var.project_brand.application_title
}

resource "google_iap_client" "project_client" {
  display_name = "Catalog client"
  brand        = google_iap_brand.project_brand.name
}

resource "google_iap_web_iam_member" "web_access" {
  for_each = toset(var.allowed_access_list)
  role     = "roles/iap.httpsResourceAccessor"
  member   = each.key
}

Debug Output

Error: Provider produced inconsistent result after apply

When applying changes to module.iap.google_iap_web_iam_member.web_access["domain:domainX.com"], provider "registry.terraform.io/hashicorp/google" produced an unexpected new value: Root resource was present, but now absent.

This is a bug in the provider, which should be reported in the provider's own issue tracker.

Error: Provider produced inconsistent result after apply

When applying changes to module.iap.google_iap_web_iam_member.web_access["domain:domainY.com"], provider "registry.terraform.io/hashicorp/google" produced an unexpected new value: Root resource was present, but now absent.

This is a bug in the provider, which should be reported in the provider's own issue tracker.

Panic Output

Expected Behavior

Actual Behavior

The IAP web access is given as expected. Checking the IAP console members the access list is deduped to the GCP root organization.. I've checked with the GCP support and this already a known issue bug id b/180042161

Steps to Reproduce

terraform apply

Important Factoids

Both domains are under the same organizations

References

0000

b/301412331

edwardmedia commented 3 years ago

@MrwanBaghdad can you share the full debug log?

MrwanBaghdad commented 3 years ago

 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:10.159+0200
2021-03-31T15:48:10.639+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:10 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:10 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V14ey4=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:10.639+0200
2021-03-31T15:48:10.639+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:10 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:10.639+0200
2021-03-31T15:48:10.639+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:10 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:10.639+0200
2021-03-31T15:48:10.640+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:10 [DEBUG]: Retrieved policy for iap web "projects//iap_web": &{AuditConfigs:[] Bindings:[0xc000280ea0] Etag:BwW+1VrlveQ= Version:3 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:10.639+0200
2021-03-31T15:48:11.640+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:11 [DEBUG]: Retrieving policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:11.640+0200
2021-03-31T15:48:11.640+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:11 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:11.640+0200
2021-03-31T15:48:11.640+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:11 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:11.640+0200
2021-03-31T15:48:11.640+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:11 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:11.640+0200
2021-03-31T15:48:11.641+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:11 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:getIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 41
Content-Type: application/json
Accept-Encoding: gzip

{
 "options": {
  "requestedPolicyVersion": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:11.641+0200
2021-03-31T15:48:12.039+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:12 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:12 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V14ey4=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:12.039+0200
2021-03-31T15:48:12.039+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:12 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:12.039+0200
2021-03-31T15:48:12.039+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:12 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:12.039+0200
2021-03-31T15:48:12.039+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:12 [DEBUG]: Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc000280ea0] Etag:BwW+1VrlveQ= Version:3 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:12.039+0200
2021-03-31T15:48:13.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG]: Retrieving policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:13.042+0200
2021-03-31T15:48:13.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:13.042+0200
2021-03-31T15:48:13.043+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:13.043+0200
2021-03-31T15:48:13.043+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:13.043+0200
2021-03-31T15:48:13.043+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:getIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 41
Content-Type: application/json
Accept-Encoding: gzip

{
 "options": {
  "requestedPolicyVersion": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:13.043+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:13 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V14ey4=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG]: Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc000280ea0] Etag:BwW+1VrlveQ= Version:3 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG]: Set policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Unlocking "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Unlocked "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Locked "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG]: Retrieving policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] matching ID {project-id} to regex (?P<project>[^/]+).: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Locking "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.538+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:getIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 41
Content-Type: application/json
Accept-Encoding: gzip

{
 "options": {
  "requestedPolicyVersion": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:13.538+0200
2021-03-31T15:48:13.938+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:13 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V14ey4=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:13.938+0200
2021-03-31T15:48:13.938+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:13.938+0200
2021-03-31T15:48:13.938+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:13.938+0200
2021-03-31T15:48:13.938+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG]: Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc000c8f920] Etag:BwW+1V14ey4= Version:1 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:13.938+0200
2021-03-31T15:48:13.938+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG]: Setting policy for iap web "projects/{project-id}/iap_web" to &{AuditConfigs:[] Bindings:[0xc000c8faa0] Etag:BwW+1V14ey4= Version:3 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:13.938+0200
2021-03-31T15:48:13.938+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:13.938+0200
2021-03-31T15:48:13.939+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:13.938+0200
2021-03-31T15:48:13.939+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:13.939+0200
2021-03-31T15:48:13.939+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:13 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:setIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 160
Content-Type: application/json
Accept-Encoding: gzip

{
 "policy": {
  "bindings": [
   {
    "members": [
     "domain:{organizationDomain.net}",
     "domain:{domainY.com}"
    ],
    "role": "roles/iap.httpsResourceAccessor"
   }
  ],
  "etag": "BwW+1V14ey4=",
  "version": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:13.939+0200
2021-03-31T15:48:14.659+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:14 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:14 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V3MiAs=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
        "domain:{organizationDomain.net}",
"domain:{domainY.com}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:14.659+0200
2021-03-31T15:48:14.659+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:14 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:14.659+0200
2021-03-31T15:48:14.659+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:14 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:14.659+0200
2021-03-31T15:48:15.663+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:15 [DEBUG]: Retrieving policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:15.663+0200
2021-03-31T15:48:15.663+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:15 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:15.663+0200
2021-03-31T15:48:15.664+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:15 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:15.663+0200
2021-03-31T15:48:15.664+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:15 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:15.664+0200
2021-03-31T15:48:15.664+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:15 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:getIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 41
Content-Type: application/json
Accept-Encoding: gzip

{
 "options": {
  "requestedPolicyVersion": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:15.664+0200
2021-03-31T15:48:16.138+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:16 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:16 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V3MiAs=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:16.137+0200
2021-03-31T15:48:16.138+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:16 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:16.138+0200
2021-03-31T15:48:16.138+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:16 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:16.138+0200
2021-03-31T15:48:16.138+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:16 [DEBUG]: Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc000c8faa0] Etag:BwW+1V14ey4= Version:3 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:16.138+0200
2021-03-31T15:48:17.142+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG]: Retrieving policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:17.142+0200
2021-03-31T15:48:17.142+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:17.142+0200
2021-03-31T15:48:17.143+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:17.142+0200
2021-03-31T15:48:17.143+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:17.142+0200
2021-03-31T15:48:17.143+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:getIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 41
Content-Type: application/json
Accept-Encoding: gzip

{
 "options": {
  "requestedPolicyVersion": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:17.143+0200
2021-03-31T15:48:17.541+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:17 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V3MiAs=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:17.541+0200
2021-03-31T15:48:17.541+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:17.541+0200
2021-03-31T15:48:17.541+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:17.541+0200
2021-03-31T15:48:17.541+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:17 [DEBUG]: Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc000c8faa0] Etag:BwW+1V14ey4= Version:3 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:17.541+0200
module.iap.google_iap_web_iam_member.web_access["domain:{domainY.com}"]: Still creating... [10s elapsed]
module.iap.google_iap_web_iam_member.web_access["domain:{domainX.com}"]: Still creating... [10s elapsed]
2021-03-31T15:48:18.546+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:18 [DEBUG]: Retrieving policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:18.546+0200
2021-03-31T15:48:18.547+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:18 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:18.547+0200
2021-03-31T15:48:18.547+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:18 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:18.547+0200
2021-03-31T15:48:18.547+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:18 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:18.547+0200
2021-03-31T15:48:18.547+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:18 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:getIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 41
Content-Type: application/json
Accept-Encoding: gzip

{
 "options": {
  "requestedPolicyVersion": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:18.547+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:19 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V3MiAs=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG]: Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc000c8faa0] Etag:BwW+1V14ey4= Version:3 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG]: Set policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Unlocking "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Unlocked "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Locked "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retrieving policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] matching ID {project-id} to regex (?P<project>[^/]+).: timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Locking "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.042+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:19.042+0200
2021-03-31T15:48:19.043+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:19.043+0200
2021-03-31T15:48:19.043+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:19.043+0200
2021-03-31T15:48:19.043+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:getIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 41
Content-Type: application/json
Accept-Encoding: gzip

{
 "options": {
  "requestedPolicyVersion": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:19.043+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:19 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V3MiAs=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:19.538+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc0006db320] Etag:BwW+1V3MiAs= Version:1 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Unlocking "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Unlocked "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG]: Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc0006db320] Etag:BwW+1V3MiAs= Version:1 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG]: Looking for binding with role "roles/iap.httpsResourceAccessor" and condition //: timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Locked "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retrieving policy for iap web "projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG]: Looking for member "domain:{domainX.com}" in found binding: timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG]: Member "domain:{domainX.com}" for binding for role "roles/iap.httpsResourceAccessor" with condition // does not exist in policy of iap web "projects/{project-id}/iap_web", removing from state.: timestamp=2021-03-31T15:48:19.539+0200
2021-03-31T15:48:19.539+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Waiting for state to become: [success]: timestamp=2021-03-31T15:48:19.539+0200
2021/03/31 15:48:19 [DEBUG] module.iap.google_iap_web_iam_member.web_access["domain:{domainX.com}"]: apply errored, but we're indicating that via the Error pointer rather than returning it: Provider produced inconsistent result after apply: When applying changes to module.iap.google_iap_web_iam_member.web_access["domain:{domainX.com}"], provider "registry.terraform.io/hashicorp/google" produced an unexpected new value: Root resource was present, but now absent.

This is a bug in the provider, which should be reported in the provider's own issue tracker.
2021-03-31T15:48:19.540+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retry Transport: starting RoundTrip retry loop: timestamp=2021-03-31T15:48:19.540+0200
2021-03-31T15:48:19.540+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Retry Transport: request attempt 0: timestamp=2021-03-31T15:48:19.540+0200
2021-03-31T15:48:19.540+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:19 [DEBUG] Google API Request Details:
---[ REQUEST ]---------------------------------------
POST /v1/projects/{project-id}/iap_web:getIamPolicy?alt=json HTTP/1.1
Host: iap.googleapis.com
User-Agent: Terraform/0.14.8 (+https://www.terraform.io) Terraform-Plugin-SDK/2.4.4 terraform-provider-google/dev
Content-Length: 41
Content-Type: application/json
Accept-Encoding: gzip

{
 "options": {
  "requestedPolicyVersion": 3
 }
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:19.540+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG] Google API Response Details:
---[ RESPONSE ]--------------------------------------
HTTP/2.0 200 OK
Alt-Svc: h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Cache-Control: private
Content-Type: application/json; charset=UTF-8
Date: Wed, 31 Mar 2021 13:48:20 GMT
Server: ESF
Vary: Origin
Vary: X-Origin
Vary: Referer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 0

{
  "version": 1,
  "etag": "BwW+1V3MiAs=",
  "bindings": [
    {
      "role": "roles/iap.httpsResourceAccessor",
      "members": [
"domain:{organizationDomain.net}"
      ]
    }
  ]
}

-----------------------------------------------------: timestamp=2021-03-31T15:48:20.037+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG] Retry Transport: Stopping retries, last request was successful: timestamp=2021-03-31T15:48:20.037+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG] Retry Transport: Returning after 1 attempts: timestamp=2021-03-31T15:48:20.037+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG] Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc0006cd4a0] Etag:BwW+1V3MiAs= Version:1 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:20.038+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG] Unlocking "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:20.038+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG] Unlocked "iam-iap-web-projects/{project-id}/iap_web": timestamp=2021-03-31T15:48:20.038+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG]: Retrieved policy for iap web "projects/{project-id}/iap_web": &{AuditConfigs:[] Bindings:[0xc0006cd4a0] Etag:BwW+1V3MiAs= Version:1 ServerResponse:{HTTPStatusCode:0 Header:map[]} ForceSendFields:[] NullFields:[]}: timestamp=2021-03-31T15:48:20.038+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG]: Looking for binding with role "roles/iap.httpsResourceAccessor" and condition //: timestamp=2021-03-31T15:48:20.038+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG]: Looking for member "domain:{domainY.com}" in found binding: timestamp=2021-03-31T15:48:20.038+0200
2021-03-31T15:48:20.038+0200 [INFO]  plugin.terraform-provider-google_v3.60.0_x5: 2021/03/31 15:48:20 [DEBUG]: Member "domain:{domainY.com}" for binding for role "roles/iap.httpsResourceAccessor" with condition // does not exist in policy of iap web "projects/{project-id}/iap_web", removing from state.: timestamp=2021-03-31T15:48:20.038+0200
2021/03/31 15:48:20 [DEBUG] module.iap.google_iap_web_iam_member.web_access["domain:{domainY.com}"]: apply errored, but we're indicating that via the Error pointer rather than returning it: Provider produced inconsistent result after apply: When applying changes to module.iap.google_iap_web_iam_member.web_access["domain:{domainY.com}"], provider "registry.terraform.io/hashicorp/google" produced an unexpected new value: Root resource was present, but now absent.

This is a bug in the provider, which should be reported in the provider's own issue tracker.

Error: Provider produced inconsistent result after apply

When applying changes to
module.iap.google_iap_web_iam_member.web_access["domain:{domainY.com}"],
provider "registry.terraform.io/hashicorp/google" produced an unexpected new
value: Root resource was present, but now absent.

This is a bug in the provider, which should be reported in the provider's own
issue tracker.

Error: Provider produced inconsistent result after apply

When applying changes to
module.iap.google_iap_web_iam_member.web_access["domain:{domainX.com}"],
provider "registry.terraform.io/hashicorp/google" produced an unexpected new
value: Root resource was present, but now absent.

This is a bug in the provider, which should be reported in the provider's own
issue tracker.

MrwanBaghdad commented 3 years ago

@edwardmedia I've tried to apply using the rootOrganizaitondomin.net value and it works without errors!! My suspicion is that the two domains are being resolved to rootOrganization.net and deduped on the API side - I synced with GCP support and they verified it as a known bug on GCP web console; child domains are resolved to the parent organization and deduped -. From the logs I see the response is returning rootOrganization.net

ScottSuarez commented 3 years ago

Not much we can do here, our lead posted in the internal bug why this sort of intelligent behavior an issue for terraform and other stateful infrastructure management systems. We could potentially look into adding a disclaimer to the documentation but behavior wise our hands our tied.

bryan0515 commented 5 months ago

Is this being documented? If so, can someone share it here, and close this?

hashicorp / terraform-provider-google