Error 403: Your application is authenticating by using local Application Default Credentials

[natea]

I'm trying to run the command: terraform -chdir=terraform apply -auto-approve and the following error is occurring:

│ Error: Error creating InspectTemplate: googleapi: Error 403: Your application is authenticating by using local Application Default Credentials. The dlp.googleapis.com API requires a quota project, which is not set by default. To learn how to set your quota project, see https://cloud.google.com/docs/authentication/adc-troubleshooting/user-creds .
│ Details:
│ [
│   {
│     "@type": "type.googleapis.com/google.rpc.ErrorInfo",
│     "domain": "googleapis.com",
│     "metadata": {
│       "consumer": "projects/764086051850",
│       "service": "dlp.googleapis.com"
│     },
│     "reason": "SERVICE_DISABLED"
│   }
│ ]
│
│   with module.pdf_redactor.google_data_loss_prevention_inspect_template.dlp_pdf_template,
│   on pdf-redactor/dlp.tf line 15, in resource "google_data_loss_prevention_inspect_template" "dlp_pdf_template":
│   15: resource "google_data_loss_prevention_inspect_template" "dlp_pdf_template" {

I then followed the suggested help doc https://cloud.google.com/docs/authentication/adc-troubleshooting/user-creds where it suggests to run the command gcloud auth application-default set-quota-project YOUR_PROJECT

So I ran that command with my project name.

$ gcloud auth application-default set-quota-project aeropsychiatry

Credentials saved to file: [/Users/nateaune/.config/gcloud/application_default_credentials.json]

These credentials will be used by any library that requests Application Default Credentials (ADC).

Quota project "aeropsychiatry" was added to ADC which can be used by Google client libraries for billing and quota. Note that some services may still bill the project owning the resource.

But I get the same error as before. Any ideas what might be going wrong?

[felimartina]

Hey @natea - are you running this using a project with billing enabled on it? or is it a free trial project?

[flolopdel]

Hello!

I am experiencing the same issue. I did all kind of test and search, but it's still saying the service is disabled.

I can create an inspect template properly from the Google cloud console. Any ideas to test it?

[natea]

Billing is enabled for the project. Nate Aune - ***@***.*** http://www.nateaune.com +1 (617) 517-4953 Sent via Superhuman iOS ( ***@***.*** )

…

On Fri, Jul 19 2024 at 10:50 AM, Pipe Martina < ***@***.*** > wrote: Hey @natea ( https://github.com/natea ) - are you running this using a project with billing enabled on it? or is it a free trial project? — Reply to this email directly, view it on GitHub ( #25 (comment) ) , or unsubscribe ( https://github.com/notifications/unsubscribe-auth/AAA5BSF2YIR2JNRSRNEA35TZNERVBAVCNFSM6AAAAABLBAGM3OVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMZZGM4TKMJYGY ). You are receiving this because you were mentioned. Message ID: <GoogleCloudPlatform/dlp-pdf-redaction/issues/25/2239395186 @ github. com>

[jayBana]

We did run into this issue as well and got resolved by adding the billing_project and user_project_override the provider block in dlp-pdf-redaction/terraform/pdf-redactor/main.tf

provider  "google" {
  project = var.project_id
  region  = var.region
  billing_project = var.project_id
  user_project_override = true
}

See for reference describing a similar issue, but with another GCP service:
hashicorp/terraform-provider-google#15066

[felimartina]

Hey @jayBana thanks for chiming in and sharing the work around. Would you say we should add those two settings to the provider by default?

@natea @flolopdel - can you please confirm if the change above fixes the problem for you? If so then I can go ahead and merge those changes to make it the default.

PS: Apologies for the slow reply in here.