fix: shared_vpc resources at folder level is in beta

[xingao267]

ref:

• https://cloud.google.com/vpc/docs/provisioning-shared-vpc#enable-shared-vpc-host
• https://cloud.google.com/vpc/docs/provisioning-shared-vpc#create-shared

[comment-bot-dev]

Thanks for the PR! 🚀
✅ Lint checks have passed.

[morgante]

@xingao267 Does this actually require the beta API? The fields seem to be the same.

[xingao267]

@xingao267 Does this actually require the beta API? The fields seem to be the same.

yea, we recently encountered this error (the service account that tries to enable shared VPC host and service project in a folder gets a 403 permission denied error even it has the folder level Shared VPC Admin role), and after looking into this, the doc says if you have Shared VPC Admin role at the folder level, you need to use gcloud beta commands. The folder support is still in beta.

I'm not sure why it was fine before, as I assume there are tests that cover folder level shared VPCs, but the issues seems just surfaced recently.

[xingao267]

/gcbrun

[ruanda]

I'm not sure why it was fine before, as I assume there are tests that cover folder level shared VPCs, but the issues seems just surfaced recently.

Google provider (not beta) before 3.60 actually used beta calls for shared vpc. It was "fixed" in hashicorp/terraform-provider-google@a6f342c#diff-d00da7be384ad2ae0338a4ab6a736a8635ca9d9a9265fc14e6a792865b9214fa

[xingao267]

I'm not sure why it was fine before, as I assume there are tests that cover folder level shared VPCs, but the issues seems just surfaced recently.

Google provider (not beta) before 3.60 actually used beta calls for shared vpc. It was "fixed" in hashicorp/terraform-provider-google@a6f342c#diff-d00da7be384ad2ae0338a4ab6a736a8635ca9d9a9265fc14e6a792865b9214fa

Thanks for finding the root cause!