deploy-appengine
deploy-appengine copied to clipboard
Documentation has incomplete required permissions
TL;DR
For App Engine's standard Node runtime I needed the roles/storage.objectAdmin
permission on the service account.
Expected behavior The README should mention this role.
Observed behavior
The REAME only mentions roles/compute.storageAdmin
and a deployment fails:
Services to deploy:
descriptor: [/home/runner/work/project-id/project-id/app.yaml]
source: [/home/runner/work/project-id/project-id]
target project: [project-id]
target service: [default]
target version: [20211017t12345]
target url: [https://project-id.appspot.com]
target service account: [App Engine default service account]
Beginning deployment of service [default]...
ERROR: (gcloud.app.deploy) 403 Could not list bucket [staging.project-id.appspot.com]: [email protected] does not have storage.objects.list access to the Google Cloud Storage bucket.