Reputation: 309
I have created a GKE cluster according to the requirements (https://cloud.google.com/ai-platform/pipelines/docs/configure-gke-cluster) of the Kubeflow Pipelines as following:
When trying to select the cluster on the Kubeflow Pipelines (from Marketplace) configuration, it says "Insufficient OAuth scopes".
I thought maybe I overlooked an important steps, so I tried creating a new cluster from the Kubeflow Pipelines configuration page. When trying to select this cluster, it still says "Insufficient OAuth Scopes".
Are there more roles that need to be added to the service account?
Upvotes: 1
Views: 408
Reputation: 309
It turns out you need to configure oauth-scope https://www.googleapis.com/auth/cloud-platform for the node pool in addition to the service account for granular access. The oauth-scope sort of enables access to "everything", but access is restricted based on the IAM roles for the service account.
The documentation could have been clearer on this.
Upvotes: 1