search

statmike / vertex-ai-mlops

Google Cloud Platform Vertex AI end-to-end workflows for machine learning operations
Apache License 2.0
508 stars 234 forks source link

Pipeline running error for 02c, missing permissions for the service account #60

Open zhhtu opened 6 months ago

zhhtu commented 6 months ago

I'm running the 02c, pipleine.run, and got the following error: "message: "Failed to create pipeline job. Error: Service account 109198530430-compute@developer.gserviceaccount.com does not have [storage.objects.get, storage.objects.create] IAM permission(s) to the bucket \"learn-demo1\". Please either copy the files to the Google Cloud Storage bucket owned by your project, or grant the required IAM permission(s) to the service account..""

It seems the service account does not have permission to the bucket, I've tried to change the role of the account from "Editor" to "owner" manually in the IAM section but it did not work.

jporte111 commented 3 months ago

I recieved the same error, it gave me these instructions:

From the console link above, or by going to https:/console.cloud.google.com and navigating to "IAM & Admin > IAM":

Locate the row for the service account listed above: -compute@developer.gserviceaccount.com Under the inheritance column click the pencil icon to edit roles In the fly over menu, under Assign roles select Add Another Role Click the Select a role box and type Storage Object Admin, then select Storage Object Admin Click Save Rerun the list of services below and verify the role has been added.

I tried this and it didn't work.