2

I made a mistake deleting an user service-[project number]@dataflow-service-producer-prod.iam.gserviceaccount.com in Service accounts, I should have deleted another user. After that, the Dataprep stopped running the jobs.

I've checked all guidelines about dataflow and dataprep: if the API is enable (yes, it is). If there is a proper service account (yes). But I don't know what rules to assign to these accounts.

I tried assigning the "Cloud Dataflow Service Agent" role for this account, but it doesn't appear for me >

enter image description here enter image description here

I tried too assigning another roles, but didn't work.

It all started when I deleted this account erroneously.

Someone knows how solve this?

PS: I'm working progress with my English, sorry for some mistakes.

Jinjun
  • 381
  • 2
  • 11
THIAGO LIMA
  • 23
  • 3

2 Answers2

3

If you accidentally deleted the Dataflow service account, disable Dataflow API then re-enable it will create the service account again automatically.

Jinjun
  • 381
  • 2
  • 11
  • Hi @Jinjun! If I do it, probaly I'll lost everthing I had done in Dataprep? – THIAGO LIMA Oct 04 '18 at 15:03
  • It didn't work. it continues return error :( "Workflow failed. Causes: Permissions verification for controller service account failed. IAM role roles/dataflow.worker should be granted to controller service account" I've checked all assignments ("service-@dataflow-service-producer-prod.iam.gserviceaccount.com") and ("-compute@developer.gserviceaccount.com"), and still keeps retuning error. – THIAGO LIMA Oct 05 '18 at 14:03
  • The error is on controller service account. According to this documentation [Controller Service Account](https://cloud.google.com/dataflow/security-and-permissions#controller-service-account), the default controller service account is -compute@developer.gserviceaccount.com. Are you sure this account has the role roles/dataflow.worker? – Jinjun Oct 06 '18 at 01:15
  • I have no clue what happening. The other user (@dataflow-service-producer-prod.iam.gserviceaccount.com) is correct. I assigned with the correct roles. https://imgur.com/EFS3MZX – THIAGO LIMA Oct 08 '18 at 19:44
  • How about disable and re-enable Compute Engine API? When Dataprep was not working, what was the error message from Dataprep? – Jinjun Oct 10 '18 at 00:59
  • Hi @Jinjun! When I tried disable and re-enable GCE I lost all my jobs in Dataprep, 'cause they are connected (google support info) I was talking with Support Google Team and they can't solved the problem, and I couldn't wait more and I created a new project. really thank you for your assist. – THIAGO LIMA Oct 15 '18 at 13:10
1

Disabling/Enabling the API is not recommended as associated resources will be impacted. You should rather undelete the default service account in the following 30 days. You would need its ACCOUNT_UNIQUE_ID that can be found in the generated logs when it was deleted. Find details here.

MonicaPC
  • 379
  • 4
  • 15