Closed Shakahs closed 1 year ago
The derivative function deploys and executes normally if I copy the IAM changes from managed Rowy, so this is purely a documentation issue.
Create service account rowy-functions with these permissions: BigQuery Admin Cloud Datastore User Firebase Cloud Messaging API Admin Logs Writer Secret Manager Secret Accessor Storage Object Admin
And rowy-backend needs this IAM grant to use the service account gcloud iam service-accounts add-iam-policy-binding rowy-functions@YOURPROJECT.iam.gserviceaccount.com --member serviceAccount:rowy-backend@YOURPROJECT.iam.gserviceaccount.com --role roles/iam.serviceAccountUser
I can confirms this works. Thanks @Shakahs!
Documentation is now improved.
Describe the bug When building a function self-hosted Rowy tries to invoke a rowy-functions service account, but that service account is not documented in the setup instructions so the build fails.
To Reproduce Steps to reproduce the behavior:
Expected behavior Rowy should provide documentation for setting up the rowy-functions service account.
Screenshots Rowy Log:
GCP Log:
Rowy Run version Rowy Run v1.6.4