title: GKE 1.4.5 (master and nodes) on gci cannot access cloud storage
body: <p>I am attempting to migrate our GKE cluster (running 1.4.5) from container-vm to gci.
  I am using the migration guide at <a href="https://cloud.google.com/container-engine/docs/node-image-migration" rel="nofollow noreferrer">https://cloud.google.com/container-engine/docs/node-image-migration</a></p>
  
  <p>When I get my deployment on a gci node, I cannot access cloud storage, I use the google-cloud java 0.5.0 library (same issue with 0.4.0); the error I get is an insufficient rights, there are no problems on the container-vm node.</p>
  
  <p>Here are my cluster permissions :</p>
  
  <pre><code>User info                  Enabled
  Compute                    Read Write
  Storage                    Read Write
  Task queue                 Enabled
  BigQuery                   Enabled
  Cloud SQL                  Enabled
  Cloud Datastore            Enabled
  Stackdriver Logging API    Full
  Stackdriver Monitoring API Full
  Cloud Platform            Enabled
  Bigtable Data             Read Write
  Bigtable Admin            Full
  Cloud Pub/Sub             Enabled
  Service Control           Enabled
  Service Management        Read Write
  Stackdriver Trace         Disabled
  Cloud Source Repositories Disabled
  </code></pre>
  
  <p>here is the error I get:</p>
  
  <pre><code>com.google.cloud.storage.StorageException: Insufficient Permission
  at com.google.cloud.storage.spi.DefaultStorageRpc.translate(DefaultStorageRpc.java:202) ~[google-cloud-storage-0.5.0.jar:0.5.0]
  at com.google.cloud.storage.spi.DefaultStorageRpc.create(DefaultStorageRpc.java:253) ~[google-cloud-storage-0.5.0.jar:0.5.0]
  ...
  Caused by: com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 Forbidden
      {
         "code" : 403,
         "errors" : [ {
           "domain" : "global",
           "message" : "Insufficient Permission",
           "reason" : "insufficientPermissions"
         } ],
         "message" : "Insufficient Permission"
      }
  </code></pre>