Build failed when deploying MeasurementAdTechServer to App Engine.

[jameswu0629]

We need to grant Storage Object Viewer permission to a service account manually. Could it be automated in the deploment script?

starting build "5c14b12e-d2eb-4c5b-901e-a2a5cab2fb06"

FETCHSOURCE
BUILD
Starting Step #0 - "fetch"
Step #0 - "fetch": Pulling image: us.gcr.io/gae-runtimes/utilities/gcs-fetcher:base_20221211_18_04_RC00
Step #0 - "fetch": base_20221211_18_04_RC00: Pulling from gae-runtimes/utilities/gcs-fetcher
Step #0 - "fetch": Digest: sha256:e343f49b366df04df991ba996adf5a6d555d7789337654642e0218ac5034c79b
Step #0 - "fetch": Status: Downloaded newer image for us.gcr.io/gae-runtimes/utilities/gcs-fetcher:base_20221211_18_04_RC00
Step #0 - "fetch": us.gcr.io/gae-runtimes/utilities/gcs-fetcher:base_20221211_18_04_RC00
Step #0 - "fetch": Fetching manifest gs://staging.copper-eye-375006.appspot.com/ae/346c4fb4-d73e-4f78-b308-9135dc26d277/manifest.json.
Step #0 - "fetch": Failed to fetch gs://staging.copper-eye-375006.appspot.com/ae/346c4fb4-d73e-4f78-b308-9135dc26d277/manifest.json, will no longer retry: Access to bucket staging.copper-eye-375006.appspot.com denied. You must grant Storage Object Viewer permission to 429764451452@cloudbuild.gserviceaccount.com.
Step #0 - "fetch": Access to bucket staging.copper-eye-375006.appspot.com denied. You must grant Storage Object Viewer permission to 429764451452@cloudbuild.gserviceaccount.com.
Finished Step #0 - "fetch"
ERROR
ERROR: build step 0 "us.gcr.io/gae-runtimes/utilities/gcs-fetcher:base_20221211_18_04_RC00" failed: step exited with non-zero status: 1

[erintwalsh]

Hi @jameswu0629, thanks for the suggestion! We will look into automation for permissions.

In the meantime, you can find out more about getting a Storage Object Viewer role for your account here: https://cloud.google.com/storage/docs/access-control/iam-roles

[cshmerling]

Closing this as it appears the issue has been addressed. Please reopen if you are still experiencing the problem