search

GAM-team / GAM

command line management for Google Workspace
https://github.com/GAM-team/GAM/wiki
Apache License 2.0
3.5k stars 470 forks source link

ERROR: [{'@type': 'type.googleapis.com/google.rpc.PreconditionFailure', 'violations': #1678

Closed xmen2005 closed 22 hours ago

xmen2005 commented 6 months ago

I dont know this problem when trying to create. gam project

ERROR: [{'@type': 'type.googleapis.com/google.rpc.PreconditionFailure', 'violations': [{'type': 'constraints/iam.disableServiceAccountKeyUpload', 'subject': 'projects/gam-project-8pu-9kg-2k7/serviceAccounts/gam-project-8pu-9kg-2k7@gam-project-8pu-9kg-2k7.iam.gserviceaccount.com?configvalue=gam-project-8pu-9kg-2k7%40gam-project-8pu-9kg-2k7.iam.gserviceaccount.com', 'description': 'Constraint constraints/iam.disableServiceAccountKeyUpload violated for service account projects/gam-project-8pu-9kg-2k7/serviceAccounts/gam-project-8pu-9kg-2k7@gam-project-8pu-9kg-2k7.iam.gserviceaccount.com attempting to upload public key.'}]}]

gam

jay0lee commented 6 months ago

Show the whole error message.

On Sun, Mar 17, 2024, 11:14 AM xmen2005 @.***> wrote:

I dont know this problem when trying to create. gam project

gam.png (view on web) https://github.com/GAM-team/GAM/assets/131977295/85e0032a-926b-4e21-a194-426a61c17dc4

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1678, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABDIZMD4A7HAIHTFT4HT4JTYYWXLZAVCNFSM6AAAAABE2JFWOWVHI2DSMVQWIX3LMV43ASLTON2WKOZSGE4TANZRGY3TGMI . You are receiving this because you are subscribed to this thread.Message ID: @.***>

xmen2005 commented 6 months ago

Show the whole error message. … On Sun, Mar 17, 2024, 11:14 AM xmen2005 @.> wrote: I dont know this problem when trying to create. gam project gam.png (view on web) https://github.com/GAM-team/GAM/assets/131977295/85e0032a-926b-4e21-a194-426a61c17dc4 — Reply to this email directly, view it on GitHub <#1678>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABDIZMD4A7HAIHTFT4HT4JTYYWXLZAVCNFSM6AAAAABE2JFWOWVHI2DSMVQWIX3LMV43ASLTON2WKOZSGE4TANZRGY3TGMI . You are receiving this because you are subscribed to this thread.Message ID: @.>

ERROR: [{'@type': 'type.googleapis.com/google.rpc.PreconditionFailure', 'violations': [{'type': 'constraints/iam.disableServiceAccountKeyUpload', 'subject': 'projects/gam-project-8pu-9kg-2k7/serviceAccounts/gam-project-8pu-9kg-2k7@gam-project-8pu-9kg-2k7.iam.gserviceaccount.com?configvalue=gam-project-8pu-9kg-2k7%40gam-project-8pu-9kg-2k7.iam.gserviceaccount.com', 'description': 'Constraint constraints/iam.disableServiceAccountKeyUpload violated for service account projects/gam-project-8pu-9kg-2k7/serviceAccounts/gam-project-8pu-9kg-2k7@gam-project-8pu-9kg-2k7.iam.gserviceaccount.com attempting to upload public key.'}]}]

jay0lee commented 6 months ago

constraints/iam.disableServiceAccountKeyUpload

In the error message indicates your GCP organization is configured to prevent all service account key creation and usage. What you can do is run GAM on a Google Compute Engine VM. Try following the instructions at:

https://github.com/GAM-team/GAM/wiki/Running-GAM-on-Google-Compute-Engine-(GCE)-Securely

Jay

On Sun, Mar 17, 2024, 11:54 AM xmen2005 @.***> wrote:

Show the whole error message. … <#m6029273932474541044> On Sun, Mar 17, 2024, 11:14 AM xmen2005 @.> wrote: I dont know this problem when trying to create. gam project gam.png (view on web) https://github.com/GAM-team/GAM/assets/131977295/85e0032a-926b-4e21-a194-426a61c17dc4 https://github.com/GAM-team/GAM/assets/131977295/85e0032a-926b-4e21-a194-426a61c17dc4 — Reply to this email directly, view it on GitHub <#1678 https://github.com/GAM-team/GAM/issues/1678>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABDIZMD4A7HAIHTFT4HT4JTYYWXLZAVCNFSM6AAAAABE2JFWOWVHI2DSMVQWIX3LMV43ASLTON2WKOZSGE4TANZRGY3TGMI https://github.com/notifications/unsubscribe-auth/ABDIZMD4A7HAIHTFT4HT4JTYYWXLZAVCNFSM6AAAAABE2JFWOWVHI2DSMVQWIX3LMV43ASLTON2WKOZSGE4TANZRGY3TGMI . You are receiving this because you are subscribed to this thread.Message ID: @.>

ERROR: @. https://github.com/type': ' type.googleapis.com/google.rpc.PreconditionFailure', 'violations': [{'type': 'constraints/iam.disableServiceAccountKeyUpload', 'subject': 'projects/gam-project-8pu-9kg-2k7/serviceAccounts/ @. ?configvalue=gam-project-8pu-9kg-2k7% 40gam-project-8pu-9kg-2k7.iam.gserviceaccount.com', 'description': 'Constraint constraints/iam.disableServiceAccountKeyUpload violated for service account projects/gam-project-8pu-9kg-2k7/serviceAccounts/ @.*** attempting to upload public key.'}]}]

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1678#issuecomment-2002517137, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABDIZMFMY7DV62JJ35QEX43YYW4ENAVCNFSM6AAAAABE2JFWOWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAMBSGUYTOMJTG4 . You are receiving this because you commented.Message ID: @.***>

jay0lee commented 22 hours ago

see #1679 for details here. Closing as dupe.