The service account used has the following roles: Artifact Registry Reader Artifact Registry Writer Cloud Run Admin Service Account Token Creator Service Account User Service Usage Consumer