4

I am getting the below error. Does anyone have any idea how to solve it?

Failed to create pipeline job. Error: Vertex AI Service Agent 
'XXXXX@gcp-sa-aiplatform-cc.iam.gserviceaccount.com' should be granted
 access to the image gcr.io/gcp-project-id/application:latest
Rituraj kumar
  • 349
  • 1
  • 4
  • 15
  • According to this [doc](https://cloud.google.com/container-registry/docs/access-control) , you can give roles/storage.objectViewer, roles/storage.legacyBucketWriter and roles/storage.admin to your service account to access your image in Container Registry using the service-account. – Shipra Sarkar Jan 25 '22 at 06:17
  • If my answer addressed your question, please consider accepting and upvoting it. If not, let me know so that I can improve my answer. – Shipra Sarkar Feb 02 '22 at 14:20
  • i tried same thing it didn't work for me how did you solve it rituraj / shipra – Shubham Dangare Jul 04 '22 at 11:50

2 Answers2

3

{PROJECT_NUMBER}@gcp-sa-aiplatform-cc.iam.gserviceaccount.com is google's AI Platform service agent. This Service agent requires access to read/pull the docker image from your project's gcr to create container for pipeline run.

If You have permission to edit IAM roles, You can try adding Artifact Registry roles to the above service agent. You can start with adding roles/artifactregistry.reader.

Hope this helps :)

NikkU
  • 448
  • 3
  • 10
  • Dont forget to check the "Include Google Provided role grants" button to view the vertex AI service agent – ricardo May 16 '23 at 13:42
0

This error may have occurred due to missing roles or permissions for pulling and pushing images into Container Registry. All the users and service accounts must be given appropriate permissions for Cloud Storage who interact with Container Registry. You can give roles/storage.objectViewer, roles/storage.legacyBucketWriter and roles/storage.admin to your service account to access your image in Container Registry using the service-account. You can follow this doc for giving appropriate roles and permissions to the Service Account.

Shipra Sarkar
  • 1,385
  • 3
  • 10