Skip to content

Add scope for cloud identity api#5195

Merged
ViniciustCosta merged 2 commits intomasterfrom
fix/fix_permission_denied_ossfuzz_cc_groups
Mar 10, 2026
Merged

Add scope for cloud identity api#5195
ViniciustCosta merged 2 commits intomasterfrom
fix/fix_permission_denied_ossfuzz_cc_groups

Conversation

@ViniciustCosta
Copy link
Collaborator

@ViniciustCosta ViniciustCosta commented Mar 6, 2026

This tries to fix this recurrent error from the OSS-Fuzz CC groups cronjob: "Error(2028): Permission denied for resource groups/01gf8i834dtxfzn (or it may not exist)."
Logs link: https://cloudlogging.app.goo.gl/vKBNmcpepYYf3veo9

Context: b/477964128

@ViniciustCosta ViniciustCosta marked this pull request as ready for review March 9, 2026 16:49
@ViniciustCosta ViniciustCosta requested a review from a team as a code owner March 9, 2026 16:49
@ViniciustCosta ViniciustCosta merged commit 35b8067 into master Mar 10, 2026
11 checks passed
@ViniciustCosta ViniciustCosta deleted the fix/fix_permission_denied_ossfuzz_cc_groups branch March 10, 2026 22:11
jardondiego pushed a commit that referenced this pull request Mar 12, 2026
This tries to fix this recurrent error from the OSS-Fuzz CC groups
cronjob: `"Error(2028): Permission denied for resource
groups/01gf8i834dtxfzn (or it may not exist)."`
Logs link: https://cloudlogging.app.goo.gl/vKBNmcpepYYf3veo9

Context: b/477964128
ViniciustCosta added a commit that referenced this pull request Mar 16, 2026
The fix from #5195 was not
enough to fix the permission denied errors the cronjob is hitting, as
seen by logs: https://cloudlogging.app.goo.gl/A5TjUfxFoJRbtuLx7

As these errors do not really seem an access/credentials issue, since
the SA is the owner of all groups it tries to manage, it could
potentially be an issue with the cloud identity API rate limit. So, this
PR is another tentative to mitigate these errors by wrapping the API
calls to add/remove members with a retry logic, which delays the calls
and adds exponential backoff.

Context: b/477964128
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants