New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 855659 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
User never visited
Closed: Jun 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug



Sign in to add a comment

add read access permissions to the 'Cast CQ bot accounts' group on clank/internal/apps

Project Member Reported by dgarr...@chromium.org, Jun 22 2018

Issue description

From morchard@google.com:

When trying to check out code from clank/internal/apps we run into Access denied to 1050155847979-compute@developer.gserviceaccount.com.

Can someone with permissions please add read access permissions to the 'Cast CQ bot accounts' group on clank/internal/apps?

 

Comment 1 by s...@google.com, Jun 22 2018

Owner: smut@chromium.org
Status: Fixed (was: Untriaged)

Comment 2 by morchard@google.com, Jun 26 2018

Actually, it looks like this issue is still open... When I try to fetch I run into:

Fetching project clank/internal/apps
fatal: remote error: Access denied to 1050155847979-compute@developer.gserviceaccount.com
error: Cannot fetch clank/internal/apps


This appears to be because the "Cast CQ bot accounts" group was added to gerrit with Forge Author Identity permissions, but the Cast CQ bots run on GCP and need *Read* permissions. Please see the configuration of chromeos/ap as an example. 

Comment 3 by s...@google.com, Jun 26 2018

Sorry about that, I thought read was the first permission under each ref on the new admin UI. It is not. Fixed.

Comment 4 by morchard@google.com, Jun 28 2018

That did it, confirmed as fixed. Thanks!

Sign in to add a comment