https://pulumi.com logo
#google-cloud
Title
# google-cloud
s

square-lunch-33033

11/15/2021, 4:26 PM
I am new to GCP, and I am seeing this weird thing. I have set up a local service account and set it up on my machine with
gcloud auth activate-service-account…
I looked at my config, and auth stuffs, but pulumi is still trying to run under an old and different GCP service account it seems:
Copy code
* googleapi: Error 403: [account name]@appspot.gserviceaccount.com does not have storage.buckets.create access to the Google Cloud project., forbidden
p

prehistoric-activity-61023

11/15/2021, 4:30 PM
did you configure ADC (application default credentials)?
Run:
Copy code
gcloud auth application-default
or add
--update-adc
while running
gcloud auth
command.
authenticating gcloud != authenticating apps running on your computer (cause they rely on ADC)
s

square-lunch-33033

11/15/2021, 4:45 PM
I am pretty sure I did, I ran the following…
Copy code
$ gcloud auth application-default login
$ gcloud auth login --update-adc

and then 
$ gcloud auth list                     
                     Credentialed Accounts
ACTIVE  ACCOUNT
*       <mailto:chris@thesignuplist.com|chris@thesignuplist.com>
        <mailto:christopher-local@thesignuplist.iam.gserviceaccount.com|christopher-local@thesignuplist.iam.gserviceaccount.com>

and even... 
gcloud auth application-default set-quota-project thesignuplist

but I am still getting the following when running 
$ pulumi up

* googleapi: Error 403: [some_old_account]@appspot.gserviceaccount.com does not have storage.buckets.create access to the Google Cloud project., forbidden
b

billowy-army-68599

11/15/2021, 4:48 PM
@square-lunch-33033 that error indicaes the credentials you got don't have access to the bucket you're writing the state to. do you have an env var set?
s

square-lunch-33033

11/15/2021, 4:48 PM
d3rp, when in doubt
printev
GOOGLE_APPLICATION_CREDENTIALS
is point the old stuffs.
b

billowy-army-68599

11/15/2021, 4:49 PM
🙂
s

square-lunch-33033

11/15/2021, 4:49 PM
thank you sir.
Copy code
Outputs:
  + bucket_name: "<gs://my-bucket-b1cad9a>"
woot!