got-your-back
got-your-back copied to clipboard
Key creation is not allowed on this service account
Full steps to reproduce the issue:
- On Windows 10, download and run https://github.com/GAM-team/got-your-back/releases/download/v1.81/gyb-1.81-windows-x86_64.msi
- Fill in email address when requested.
- When browser window appears, proceed with Google account signin and granting permissions to GYB.
- Return to Command Prompt and see error.
Expected outcome: GAM setup succeeds.
Actual outcome:
Please enter your Google email address: [email protected]
Go to the following link in your browser:
https://gyb-shortn.jaylee.us/h9r8wv
IMPORTANT: If you get a browser error that the site can't be reached AFTER you
click the Allow button, copy the URL from the browser where the error occurred
and paste that here instead.
Enter verification code or browser URL: 127.0.0.1 - - [23/Jun/2024 13:08:08] "GET /?state=xxx&code=xxx&scope=https://www.googleapis.com/auth/cloud-platform HTTP/1.1" 200 91
The authentication flow has completed.
Creating project "Got Your Back Project"...
Checking project status...
Project still being created. Sleeping 1 seconds
Checking project status...
Project still being created. Sleeping 4 seconds
Checking project status...
enabling API drive.googleapis.com...
enabling API gmail.googleapis.com...
enabling API groupsmigration.googleapis.com...
enabling API iap.googleapis.com...
enabling API vault.googleapis.com...
Creating Service Account
400: b'{
"error": {
"code": 400,
"message": "Key creation is not allowed on this service account.",
"status": "FAILED_PRECONDITION",
"details": [
{
"@type": "type.googleapis.com/google.rpc.PreconditionFailure",
"violations": [
{
"type": "constraints/iam.disableServiceAccountKeyCreation",
"subject": "projects/gyb-project-d0i-771-95i/serviceAccounts/gyb-project-d0i-771-95i@gyb-project-d0i-771-95i.iam.gserviceaccount.com?configvalue=gyb-project-d0i-771-95i%40gyb-project-d0i-771-95i.iam.gserviceaccount.com",
"description": "Key creation is not allowed on this service account."
}
]
}
]
}
' - 400