CODEWITHSUNDEEP
google-app-enginegoogle-compute-engine
MeLight
MeLight

Reputation: 5575

Which permissions does a service account need to deploy to App Engine?

I have project A that is an App Engine Standard nodejs8 app. And I have project B which has a VM GCE machine with Jenkins on it - that is our builder that's supposed to deploy all other project when commit happens.

I can deploy just fine from B to A using appcfg.py update . But if I try to deploy using gcloud deploy app I get this error:

Permissions error fetching application [apps/my-project]. Please make sure you are using the correct project ID and that you have permission to view applications on the project.

I've added the service account associated with the Jenkins machine to project A and went as far as to give it owner permissions. I also enabled App Engine API on both projects.

Which permission am I missing?

Upvotes: 0

Views: 143

Answers (1)

MeLight
MeLight

Reputation: 5575

Ok, issue solved. In addition to granting all relevant permissions to the service account in project A, needed to enable access to all APIs on the VM itself (in project B).

Upvotes: 1

Related Questions