deploy-appengine icon indicating copy to clipboard operation
deploy-appengine copied to clipboard

Documentation has incomplete required permissions

Open botic opened this issue 2 years ago • 0 comments

TL;DR

For App Engine's standard Node runtime I needed the roles/storage.objectAdmin permission on the service account.

Expected behavior The README should mention this role.

Observed behavior The REAME only mentions roles/compute.storageAdmin and a deployment fails:

Services to deploy:

descriptor:                  [/home/runner/work/project-id/project-id/app.yaml]
source:                      [/home/runner/work/project-id/project-id]
target project:              [project-id]
target service:              [default]
target version:              [20211017t12345]
target url:                  [https://project-id.appspot.com]
target service account:      [App Engine default service account]


Beginning deployment of service [default]...
ERROR: (gcloud.app.deploy) 403 Could not list bucket [staging.project-id.appspot.com]: [email protected] does not have storage.objects.list access to the Google Cloud Storage bucket.

botic avatar Oct 17 '21 19:10 botic