We have created few compute engine instances via terraform which do not have any service account or scopes attached to it while creation.
we are observing that post any dashboard edits we do the default service account is getting attached to the instance definition and causing diff in next deploy also this is an unexpected change as this was not selected while making the edit.
we have started observing this change since last 1 month