No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

My project is setup like:
```name: org-identity-pubsub
runtime: yaml
config:
  vanta_label_contains_user_data:
    type: string
  vanta_label_non_prod:
    type: string
resources:
  identity-change-detection-topic:
    type: gcp:pubsub:Topic
    properties:
      name: identity-change-detection
      project: ${project}
    options:
      protect: true
  identity-change-detection-sub:
    type: gcp:pubsub:Subscription
    properties:
      labels:
        vanta-contains-user-data: '${vanta_label_contains_user_data}'
        vanta-description: shared-data-across-services
        vanta-non-prod: '${vanta_label_non_prod}'
        vanta-owner: owner
      ackDeadlineSeconds: 10
      expirationPolicy:
        ttl: ""
      messageRetentionDuration: 86400s
      name: identity-change-detection-sub
      project: ${project}
      topic: projects/${project}/topics/identity-change-detection
    options:
      protect: true
      dependsOn: 
        - ${identity-change-detection-topic}```
Config:
```config:
  gcp:project: com-org-uk-dev-9aa9cc53
  org-identity-pubsub:project: com-org-uk-dev-9aa9cc53
  org-identity-pubsub:vanta_label_contains_user_data: "false"
  org-identity-pubsub:vanta_label_non_prod: "true"```


Searched slack history, and doesn't seem like anyone has seen this before.

Created a support ticket as well; seems like a provider bug of some sort.

That error  is a `panic` in the underlying provider, and is definitely a bug.

I was able to run a `pulumi up` the above program. What version of `gcp` are you using?