title: Error creating ForwardingRule, A reserved and active subnetwork is required in the same region and VPC as the forwarding rule
body: <p>I'm trying to create a regional load balancer using terrafrom, but i'am unable to create the forwarding rules and regional http(s) proxies.</p>
  <pre><code>resource &quot;google_compute_region_ssl_certificate&quot; &quot;ssl-crt&quot; {
    project = &quot;proyecto-pegachucho&quot;
    name_prefix = &quot;my-certificate-&quot;
    region = var.lb_region
    private_key = file(&quot;lb_http/certificate/privateKey.key&quot;)
    certificate = file(&quot;lb_http/certificate/certificate.crt&quot;)
  
    lifecycle {
      create_before_destroy = true
    }
  }
  
  resource &quot;google_compute_forwarding_rule&quot; &quot;lb-front-HTTP&quot; {
    name                  = var.lb_front_name
    load_balancing_scheme = &quot;INTERNAL_MANAGED&quot;
    port_range            = var.lb_front_port_range
    target                = google_compute_region_target_http_proxy.lb-proxy-http.self_link
    region                = var.lb_region
    network               = var.lb_network
    subnetwork            = var.lb_subnetwork
    ip_address            = &quot;10.10.30.5&quot;
  }
  
  resource &quot;google_compute_forwarding_rule&quot; &quot;lb-front-HTTPS&quot; {
    name                  = &quot;lb-https-front&quot;
    port_range            = &quot;443&quot;
    load_balancing_scheme = &quot;INTERNAL_MANAGED&quot;
    ip_address            = &quot;10.10.30.6&quot;
    target                = google_compute_region_target_https_proxy.lb-proxy-https.self_link
    region                = var.lb_region
    network               = var.lb_network
    subnetwork            = var.lb_subnetwork
  }
  
  
  resource &quot;google_compute_region_target_http_proxy&quot; &quot;lb-proxy-http&quot; {
    name    = var.lb_proxy_name
    region  = var.lb_region
    project = &quot;proyecto-pegachucho&quot;
    url_map = google_compute_region_url_map.lb_url_map.self_link
  }
  
  resource &quot;google_compute_region_target_https_proxy&quot; &quot;lb-proxy-https&quot; {
    name             = &quot;test-proxy&quot;
    region           = var.lb_region
    project = &quot;proyecto-pegachucho&quot;
    url_map          = google_compute_region_url_map.lb_url_map.self_link
    ssl_certificates = [google_compute_region_ssl_certificate.ssl-crt.id]
  }
  
  
  resource &quot;google_compute_region_url_map&quot; &quot;lb_url_map&quot; {
    name            = var.url_map_name
    region          = var.lb_region
    default_service = google_compute_region_backend_service.lb-backend.self_link
  }
  
  
  resource &quot;google_compute_region_backend_service&quot; &quot;lb-backend&quot; {
    name                  = var.lb_backend_name
    region                = var.lb_region
    project = &quot;proyecto-pegachucho&quot;
    load_balancing_scheme = &quot;INTERNAL_MANAGED&quot;
    port_name             = var.lb_backend_port_name
    protocol              = var.lb_backend_protocol
    timeout_sec           = var.lb_backend_timeout
    health_checks         = [var.healthcheck_output]
    locality_lb_policy    = &quot;ROUND_ROBIN&quot;
  
    backend {
      group = var.ig_id
      balancing_mode = &quot;UTILIZATION&quot;
      capacity_scaler = 1.0
    }
  }
  </code></pre>
  <p>This throws the following error:</p>
  <pre><code>Error: Error creating ForwardingRule: googleapi: Error 400: Invalid value for field 'resource.target': 'https://www.googleapis.com/compute/v1/projects/proyecto-pegachucho/regions/us-central1/targetHttpProxies/lb-proxy'. A reserved and active subnetwork is required in the same region and VPC as the forwarding rule., invalid
  
    on lb_http\lb_http.tf line 13, in resource &quot;google_compute_forwarding_rule&quot; &quot;lb-front-HTTP&quot;:
    13: resource &quot;google_compute_forwarding_rule&quot; &quot;lb-front-HTTP&quot; {
  
  
  
  Error: Error creating ForwardingRule: googleapi: Error 400: Invalid value for field 'resource.target': 'https://www.googleapis.com/compute/v1/projects/proyecto-pegachucho/regions/us-central1/targetHttpsProxies/test-proxy'. A reserved and active subnetwork is required in the same region and VPC as the forwarding rule., invalid
  
    on lb_http\lb_http.tf line 24, in resource &quot;google_compute_forwarding_rule&quot; &quot;lb-front-HTTPS&quot;:
    24: resource &quot;google_compute_forwarding_rule&quot; &quot;lb-front-HTTPS&quot; {
  </code></pre>
  <p>I tried using google beta provider but it seems that i don´t have permissions while i have owner permissions on my terraform service account.</p>
  <pre><code>Error: Error creating RegionSslCertificate: googleapi: Error 403: Required 'compute.regionSslCertificates.create' permission for 'projects/proyecto-pegachucho/regions/us-central1/sslCertificates/my-certificate-20210628014206664300000001', forbidden
  
    on lb_http\lb_http.tf line 1, in resource &quot;google_compute_region_ssl_certificate&quot; &quot;ssl-crt&quot;:
     1: resource &quot;google_compute_region_ssl_certificate&quot; &quot;ssl-crt&quot; {
  
  
  
  Error: Error creating RegionBackendService: googleapi: Error 403: Required 'compute.regionBackendServices.create' permission for 'projects/proyecto-pegachucho/regions/us-central1/backendServices/lb-backend'      
  More details:
  Reason: forbidden, Message: Required 'compute.regionBackendServices.create' permission for 'projects/proyecto-pegachucho/regions/us-central1/backendServices/lb-backend'
  Reason: forbidden, Message: Required 'compute.healthChecks.useReadOnly' permission for 'projects/proyecto-pegachucho/global/healthChecks/hsbc-healthcheck-dev'
  Reason: forbidden, Message: Required 'compute.instanceGroups.use' permission for 'projects/proyecto-pegachucho/zones/us-central1-b/instanceGroups/tomcats-ig'
  
  
    on lb_http\lb_http.tf line 59, in resource &quot;google_compute_region_backend_service&quot; &quot;lb-backend&quot;:        
    59: resource &quot;google_compute_region_backend_service&quot; &quot;lb-backend&quot; {
  </code></pre>