{"action":"created","issue":{"url":"https://api.github.com/repos/GoogleCloudPlatform/cloud-builders/issues/120","repository_url":"https://api.github.com/repos/GoogleCloudPlatform/cloud-builders","labels_url":"https://api.github.com/repos/GoogleCloudPlatform/cloud-builders/issues/120/labels{/name}","comments_url":"https://api.github.com/repos/GoogleCloudPlatform/cloud-builders/issues/120/comments","events_url":"https://api.github.com/repos/GoogleCloudPlatform/cloud-builders/issues/120/events","html_url":"https://github.com/GoogleCloudPlatform/cloud-builders/issues/120","id":254724735,"number":120,"title":"Missing permissions on cloud container builder role ","user":{"login":"stevenbarragan","id":850686,"avatar_url":"https://avatars3.githubusercontent.com/u/850686?v=4","gravatar_id":"","url":"https://api.github.com/users/stevenbarragan","html_url":"https://github.com/stevenbarragan","followers_url":"https://api.github.com/users/stevenbarragan/followers","following_url":"https://api.github.com/users/stevenbarragan/following{/other_user}","gists_url":"https://api.github.com/users/stevenbarragan/gists{/gist_id}","starred_url":"https://api.github.com/users/stevenbarragan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stevenbarragan/subscriptions","organizations_url":"https://api.github.com/users/stevenbarragan/orgs","repos_url":"https://api.github.com/users/stevenbarragan/repos","events_url":"https://api.github.com/users/stevenbarragan/events{/privacy}","received_events_url":"https://api.github.com/users/stevenbarragan/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2017-09-01T18:56:42Z","updated_at":"2018-02-01T14:52:52Z","closed_at":"2017-09-15T16:26:00Z","author_association":"NONE","body":"I created a service account to build my images, I assigned it the \"cloud container builder\" role, it builds the image fine, but then it \"fails\" reading the logs.\r\n\r\n```\r\nERROR: (gcloud.container.builds.submit) HTTPError 403: <?xml version='1.0' encoding='UTF-8'?><Error><Code>AccessDenied</Code><Message>Access denied.</Message><Details>circleci@project.iam.gserviceaccount.com does not have storage.objects.get access to 45129378560.cloudbuild-logs.googleusercontent.com/log-afb39b5-fb91-4069-b145-4fdd2321bdd.txt.</Details></Error>\r\n```\r\n\r\nAm I missing something?"},"comment":{"url":"https://api.github.com/repos/GoogleCloudPlatform/cloud-builders/issues/comments/362289275","html_url":"https://github.com/GoogleCloudPlatform/cloud-builders/issues/120#issuecomment-362289275","issue_url":"https://api.github.com/repos/GoogleCloudPlatform/cloud-builders/issues/120","id":362289275,"user":{"login":"ImJasonH","id":210737,"avatar_url":"https://avatars1.githubusercontent.com/u/210737?v=4","gravatar_id":"","url":"https://api.github.com/users/ImJasonH","html_url":"https://github.com/ImJasonH","followers_url":"https://api.github.com/users/ImJasonH/followers","following_url":"https://api.github.com/users/ImJasonH/following{/other_user}","gists_url":"https://api.github.com/users/ImJasonH/gists{/gist_id}","starred_url":"https://api.github.com/users/ImJasonH/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ImJasonH/subscriptions","organizations_url":"https://api.github.com/users/ImJasonH/orgs","repos_url":"https://api.github.com/users/ImJasonH/repos","events_url":"https://api.github.com/users/ImJasonH/events{/privacy}","received_events_url":"https://api.github.com/users/ImJasonH/received_events","type":"User","site_admin":false},"created_at":"2018-02-01T14:52:52Z","updated_at":"2018-02-01T14:52:52Z","author_association":"MEMBER","body":"If you'd like, you can set the `logsBucket` field on the `Build` resource to specify a custom location for your logs in GCS, and grant whatever permissions you want to those logs. At that point you can explicitly add your service account as a reader (or writer, or owner) of that bucket.\r\n\r\nNote that the builder service account (`PROJECT_NUM@cloudbuild.gserviceaccount.com`) must have write access to that bucket."}}
{"actor":{"display_login":"ImJasonH"}}