So I actually noticed that the entitlement is granted without any restrictions but the IAM roles are not granted because the condition wasn't met.

You can grant the roles/compute.viewer but when you go on compute you get a permissions error.

I guess google should block the granting of entitlements if the condition is not met , as it's not very clear right now