Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deploy to Cloud Run fails to load due to missing permission "container.clusters.list" #318

Closed
hadi-muhammad opened this issue Oct 30, 2020 · 4 comments
Assignees
Labels
in-next-release kind/bug Something isn't working priority/p1 Needs action soon

Comments

@hadi-muhammad
Copy link

Environment:
Extension version: 1.7.0
VSCode version: 1.50.1
OS: Mac OS Catalina 10.15.3

Description:
"Deploy to Cloud Run" does not open this view:
image

Instead following error message is show in the window:

Failed to fetch cloud run services of the project my-secretporject-dev-4819. Error: Required "container.clusters.list" permission(s) for "projectsmy-secretporject-dev-4819".

below is my log:

Checking Docker Dependency Status.
Retrieving builders.
Getting Gcloud Login State.
Getting Gcloud Project ID.
Checking Cloud Run API status.
Getting Cloud Run Services for project "my-secretporject-dev-4819".
Failed to fetch cloud run services of the project my-secretporject-dev-4819. Error: Required "container.clusters.list" permission(s) for "projects/my-secretporject-dev-4819".

Repro step:

  1. click on Cloud Code status bar
    image
  2. select Deploy to Cloud Run
    image

I have run.admin role in the project
Anthos and GKE are disabled in the project due to org policies

@sivakku
Copy link
Member

sivakku commented Dec 1, 2020

Kamino cloned this issue to GoogleCloudPlatform/cloud-code-vscode-internal

@sivakku
Copy link
Member

sivakku commented Dec 1, 2020

@hadi-muhammad - Disabling the GKE on the project disables the default default permission list(container.clusters.list) for the project and we probably are failing when trying to list all the clusters(for Anthos) under the project. We are investigating and looking to fix not to query for Anthos clusters if the permission to list is disabled in the upcoming release. in the short time you can try the workaround of enable GKE on the service account on the project that would temporarily get you all the permissions needed for deploying to Cloud Run.

@Wijnko
Copy link

Wijnko commented Dec 2, 2020

I second this issue. Only having cloud run permissions, I cannot even list the cloud run services in the cloud run explorer. I can get a list of services by running the command gcloud run services list, but in the Cloud Run Explorer I get:

image

Error: Required "container.clusters.list" permission(s) for "projects/xxxxxxxx".

Environment:
Extension version: 1.7.0
VSCode version: 1.51.1
OS: Mac OS Catalina 10.15.6

@j-windsor j-windsor added kind/bug Something isn't working priority/p1 Needs action soon labels Jan 7, 2021
@sivakku
Copy link
Member

sivakku commented Jan 8, 2021

This will be addressed in the next release.

@sivakku sivakku closed this as completed Jan 27, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in-next-release kind/bug Something isn't working priority/p1 Needs action soon
Projects
None yet
Development

No branches or pull requests

5 participants