Our service account lost access to GCS bucket "chromeos-image-archive" |
||||
Issue descriptionIt seems that we (COS team) requested access to the GCS bucket "chromeos-image-archive" for our service accounts, as shown at https://crbug.com/868918 . Suddenly, a couple of days ago (November 27th, to be accurate), our service account "cos-test-validation-robot@system.gserviceaccount.com" has problem accessing gs://chromeos-image-archive. Here's an error message from our tests: FileError: couldn't open file '/bigstore/chromeos-image-archive/lakitu-release/R65-10323.110.0/metadata.json' with mode 'r'. error: 'cos-test-validation-robot@system.gserviceaccount.com does not have storage.objects.get access to chromeos-image-archive/lakitu-release/R65-10323.110.0/metadata.json. [PERMISSION_DENIED]', status=cos-test-validation-robot@system.gserviceaccount.com does not have storage.objects.get access to chromeos-image-archive/lakitu-release/R65-10323.110.0/metadata.json. [PERMISSION_DENIED] We'd like to know why this happened, and how we can make it work again. Thanks in advance.
,
Nov 29
,
Nov 29
,
Nov 29
Hi Edward, Please try this again. I've added the provided service account to the whitelist. Not sure how this worked before, or why it quit working. -- Mike
,
Nov 30
Our tests pass now. That means the service account can access the GCS bucket. Thanks a lot for your help! |
||||
►
Sign in to add a comment |
||||
Comment 1 by jclinton@chromium.org
, Nov 29Status: Assigned (was: Untriaged)