Labels: Foundation-Troopers Owner: ---- Status: Available (was: Assigned)
I'm running into some permissions errors with the new service account.
#1: When running `git cl try`, I get Auth error while calling swarming on behalf of user:martiniss@chromium.org: {"error": {"message": "Service account \"infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com\" is not allowed in the pool \"luci.flex.try\", see pools.cfg"}}.
I tried adding the service account to project-infra-try-task-accounts, but it then gave me this error:
Auth error while calling swarming on behalf of user:martiniss@chromium.org: {"error": {"message": "service account \"infra-try-recipes-tester@chops-service-accounts.iam.gserviceaccount.com\" matches 2 rules in the config rev 4d8a1807a85bd4f61f737cd3950b171f2d98aa92: \"luci.infra.try builders\", \"luci.infra.try recipe testers\"\n"}}.
I then removed it from that group, and magically it worked for a bit and scheduled https://chromium-swarm.appspot.com/task?id=3eebcb7129656410&refresh=10&show_raw=1&wide_logs=true
I tried git cl try again after a bit, and it failed with the original error.
#2: In the task listed above, it can't seem to upload the recipe to the isolate server. I'm not sure where those permissions are managed, but I probably need to add the service account to something.
Foundation trooper, do you know who can help with these issues?
Comment 1 Deleted