gcloud app ssl cert update failing with PERMISSION_DENIED

[Günter Grodotzki]

I am trying to update a SSL certificate for a Google App Engine project via CLI:

gcloud app ssl-certificates update NNNN --project XXX --configuration XXX --display-name=xxx.co.za --certificate=./fullchain.pem --private-key=./privkey_gae.pem

This command used to work previously but I am now getting the following error:

ERROR: (gcloud.app.ssl-certificates.update) PERMISSION_DENIED: Caller is not authorized to administer this certificate. You must be a verified owner of the certificate's domain(s) [xxx.co.za, *.xxx.co.za] to create, modify, or delete this resource. Your authorized domain(s) are []. If you own the certificate domain(s), you can obtain authorization by verifying ownership via the Webmaster Central portal: https://www.google.com/webmasters/verification/verification.

This error does not make sense as the domains are verified according to the URL (as they are also the custom domain used by the app itself). Also this was working just last month, so it seems that something changed?

Anyone else experiencing this issue?

[Günter Grodotzki]

I posted the solution here: https://stackoverflow.com/a/52298389/567193

This looks like a breaking change to me - it would be great if there was an RSS feed I could subscribe to to get notified of such changes.

[Olu]

Thank you for getting back to the Group with the resolution to this thread. Unfortunately, there is no RSS feed presently available to notify of these types of changes. Usually, major changes to the Google Cloud SDK and the Google Cloud Platform products are entered in the Release Notes.