GoogleCloud API call failed: googleapi: Error 403: Forbidden, forbidden

[JCzz]

Following this Google CloudDNS

I am trying to get Knative and Cert-manager to work on Kubernetes.

I get: googleapi: Error 403: Forbidden, forbidden

The Service Account has: DNS Administrator and Owner permissions.

Do you know why?

I have seen different issues like this, but that will not work for "automatic TLS certificate provisioning".

[JoelOtter]

What was your solution here?

[JCzz]

I removed the SA and roles attached, then re created.

[RammusXu]

Did you give node pool permission: Cloud Platform ?

https://rammusxu.github.io/2020/05/11/cert-manager-Error-presenting-challenge-GoogleCloud-API-call-failed-googleapi-Error-403-Request-had-insufficient-authentication-scopes/

[NYARAS]

I hope this helps someone though late https://stackoverflow.com/a/68633157/16583891
I faced the same problem and it took me hours to figure it out