Fix PAM entitlement permadiff by enabling PRC (#2174)

fixes #2167

Enabled PRC for PAM entitlement to fix a permadiff with an empty object
parameter.

provider/provider_yaml_test.go

@@ -957,3 +957,12 @@ func TestFirestoreBackupScheduleNoPermadiff(t *testing.T) {
 	pt.Up()
 	pt.Preview(optpreview.ExpectNoChanges())
 }
+
+func TestPAMEntitlementPermadiffRegress2167(t *testing.T) {
+	pt := pulumiTest(t, "test-programs/pam-entitlement", opttest.DownloadProviderVersion("random", "4.16.3"))
+
+	proj := getProject()
+	pt.SetConfig("gcpProj", proj)
+	pt.Up()
+	pt.Preview(optpreview.ExpectNoChanges())
+}

provider/resources.go

@@ -465,7 +465,8 @@ func Provider() tfbridge.ProviderInfo {
 				case "google_datastream_connection_profile",
 					"google_firestore_backup_schedule",
 					"google_cloud_run_service",
-					"google_cloud_run_domain_mapping":
+					"google_cloud_run_domain_mapping",
+					"google_privileged_access_manager_entitlement":
 					return true
 				default:
 					return false

provider/test-programs/pam-entitlement/.gitignore

@@ -0,0 +1,2 @@
+/bin/
+/node_modules/

provider/test-programs/pam-entitlement/Pulumi.yaml

@@ -0,0 +1,31 @@
+name: gcp_2167
+runtime:
+  name: yaml
+config:
+  gcpProj: string
+resources:
+  entitlementId:
+    type: random:index/randomString:RandomString
+    properties:
+      length: 10
+      special: false
+      upper: false
+      number: true
+
+  entitlement:
+    type: gcp:privilegedaccessmanager:entitlement
+    properties:
+      parent: "projects/${gcpProj}"
+      entitlementId: "${entitlementId.result}"
+      location: "global"
+      eligibleUsers:
+        - principals: ["domain:pulumi.com"]
+      maxRequestDuration: "7200s"
+      requesterJustificationConfig:
+        unstructured: {}
+      privilegedAccess:
+        gcpIamAccess:
+          resource: "//cloudresourcemanager.googleapis.com/projects/${gcpProj}"
+          resourceType: "cloudresourcemanager.googleapis.com/Project"
+          roleBindings:
+            - role: "roles/storage.admin"