psa_config in net-vpc module is not working

[ChrisOr4]

Hello,
I followed the Simple Exemple to create a Cloud SQL Instance but when I'm applying, I've got a terraform error :

│ Error: Error waiting for Create Service Networking Connection: Error code 9, message: Cannot modify allocated ranges in CreateConnection. Please use UpdateConnection.
│ 
│   with module.cloudrun.module.vpc.google_service_networking_connection.psa_connection[0],
│   on .terraform/modules/cloudrun.vpc/modules/net-vpc/psa.tf line 39, in resource "google_service_networking_connection" "psa_connection":
│   39: resource "google_service_networking_connection" "psa_connection" {
│ 

And the psa has been created in the cloud console

below the terraform code :

module "vpc" {
  source        = "github.com/GoogleCloudPlatform/cloud-foundation-fabric//modules/net-vpc?ref=v29.0.0"
  project_id    = var.PROJECT_ID
  name          = "vpc"
  mtu           = 1460
  routing_mode  = "REGIONAL"
  
  subnets = [
    {
      ip_cidr_range = "10.0.0.0/24"
      name          = "standard"
      region        = var.region
    },
    {
      ip_cidr_range = "10.0.16.0/24"
      name          = "serverless"
      region        = var.region
    }
  ]
  psa_config = {
    ranges = { cloud-sql = "10.33.0.0/16" }
  }
}

[juliocc]

This is not an issue of the VPC module.

The PSA API and the matching terraform resource are somewhat fragile. I suggest you avoid creating things manually or you'll find issues like this.

[ChrisOr4]

I wasn't creating things manually, the root cause was an issue with service account creation.
The project module helped to solve it.
Thanks for the answer