CODEWITHSUNDEEP
google-cloud-platformgoogle-cloud-vertex-ai
Rituraj kumar
Rituraj kumar

Reputation: 356

GCP Vertex AI Service Agent access to GCR image Error

I am getting the below error. Does anyone have any idea how to solve it?

Failed to create pipeline job. Error: Vertex AI Service Agent 
'[email protected]' should be granted
 access to the image gcr.io/gcp-project-id/application:latest

Upvotes: 5

Views: 3738

Answers (3)

user238607
user238607

Reputation: 2468

Search for "Artifact Registry API" in the Google console and then Enable it.

This solved my problem.

Upvotes: 0

Sudhanshu Yadav
Sudhanshu Yadav

Reputation: 568

{PROJECT_NUMBER}@gcp-sa-aiplatform-cc.iam.gserviceaccount.com is google's AI Platform service agent. This Service agent requires access to read/pull the docker image from your project's gcr to create container for pipeline run.

If You have permission to edit IAM roles, You can try adding Artifact Registry roles to the above service agent. You can start with adding roles/artifactregistry.reader.

Hope this helps :)

Upvotes: 4

Shipra Sarkar
Shipra Sarkar

Reputation: 1475

This error may have occurred due to missing roles or permissions for pulling and pushing images into Container Registry. All the users and service accounts must be given appropriate permissions for Cloud Storage who interact with Container Registry. You can give roles/storage.objectViewer, roles/storage.legacyBucketWriter and roles/storage.admin to your service account to access your image in Container Registry using the service-account. You can follow this doc for giving appropriate roles and permissions to the Service Account.

Upvotes: 0

Related Questions