PERMISSION_DENIED at GCP when installing

Avatar
Permanently deleted user
Created

Hello.
New to TeamCity and GCP here.
Trying to follow this post: https://blog.jetbrains.com/teamcity/2019/03/teamcity-google-cloud-deployment/

When I run the following command (properly edited):

 gcloud deployment-manager deployments create teamcity --template https://raw.githubusercontent.com/JetBrains/teamcity-google-template/master/teamcity.jinja --properties zone:<zone>

I get:

 ERROR: (gcloud.deployment-manager.deployments.create) Error in Operation [operation-1565710719862-590016f4745e1-475db8fc-4c1b6eed]: errors:- code: RESOURCE_ERROR location: /deployments/teamcity2/resources/set-account-roles message: '{"ResourceType":"gcp-types/cloudresourcemanager-v1:cloudresourcemanager.projects.setIamPolicy","ResourceErrorCode":"403","ResourceErrorMessage":{"code":403,"message":"The caller does not have permission","status":"PERMISSION_DENIED","statusMessage":"Forbidden","requestPath":"https://cloudresourcemanager.googleapis.com/v1/projects/teamcity-249714:setIamPolicy","httpMethod":"POST"}}'

I believe the problem is that I don't know how to do this:

  1. Make sure you have the permissions of the Project Owner role.

And I can't seem to be able to make it work.

Can anyone help me please?

 

P.S.:
I just created my GCP account, created a new project, and supposedly my user is the Owner. So I assume I am looking at the wrong thing/place

Votes

0

Share

2 comments
Avatar
Permanently deleted user
Created

Turns out what I needed was sleep, not more coffee...

https://cloud.google.com/blog/topics/partners/how-to-deploy-a-teamcity-continuous-integration-solution-to-google-cloud

Go to: "follow the instructions provided with the template"

gcloud projects add-iam-policy-binding $(gcloud config get-value project) \
  --member serviceAccount:$(gcloud projects describe $(gcloud config get-value project) \
  --format="value(projectNumber)")@cloudservices.gserviceaccount.com --role roles/owner
0
Avatar
Joaquin Menchaca
Created

There has to be a safer way to do this, because this is dangerous.

0

Please sign in to leave a comment.