我有一个在appengine上运行的API。上一次我成功完成构建/推送到dv环境的时间是10月6日。
今天,使用相同的cloudbuild.yaml文件并且未更改服务帐户,我看到此错误:
ERROR: (gcloud.app.deploy) PERMISSION_DENIED: You do not have permission to act as 'XXXX@appspot.gserviceaccount.com'
执行云构建的帐户为YYY@cloudbuild.gserviceaccount.com
因此,我去查看这些帐户的角色,然后看到YYY@cloudbuild.gserviceaccount.com(负责构建的帐户)的角色是:
App Engine Admin <- This should give me full access to App Engine to do a deployment, right?
Cloud Build Service Account
Secret Manager Secret Accessor
我想念什么?