gcloud app deploy now required Cloud Build API

479 views
Skip to first unread message

Yuri Sergiichuk

unread,
May 19, 2020, 7:02:27 AM5/19/20
to Google Cloud Developers
We've got an AppEngine deployment pipeline working perfectly for the last ~2 years on Jenkins, that uses a dedicated service account with AppEngine Admin IAM role, but with one of our environments we noticed that it's now failing with:
```
ERROR: (gcloud.app.deploy) Error Response: [7] Failed to create cloud build: Permission denied.
```

I do understand that we now need to add Cloud Build Service Account role to the service account and enabled Cloud Build API for the project, but I wanted to wonder when this change actually happened? I was not able to find any related info in any docs on this.

Katayoon (Cloud Platform Support)

unread,
May 19, 2020, 9:20:47 AM5/19/20
to Google Cloud Developers
Hello Yuri,

App Engine Standard(1st generation runtime) has started using Cloud Build after November 30, 2019 and you should have received an email on 2020-03-19, sent to every App Engine user on a 1st generation runtime (Python 2.7, Java8, and php 5.5) that they need to add a payment method to their account (if they don't have one) in order to continue deploying their apps after the move to Cloud Build. the email may be in your spam folder? 

Yuri Sergiichuk

unread,
May 19, 2020, 9:48:42 AM5/19/20
to Google Cloud Developers
Hello Katayoon,

Thank you for pinpointing the post for me. All our accounts have payment methods for like 5-6 years already. I did check the mails and cannot find anything related, but if it accidentally went to spam, it's not available anymore.

Anyway, even with this post, there is still not enough information in terms of the deployment itself and not the payment. I definitely see, that our last deploy to that specific environment was done in February, and as you said, the Cloud Build is in use since November 2019. So there should be smth else and not just the payment info.

Katayoon (Cloud Platform Support)

unread,
May 20, 2020, 12:01:24 PM5/20/20
to Google Cloud Developers
Hi Yuri,

Thanks for the clarification. I can see that in all documentations related to "Managing and Configuring Your App > Deploying your App" for 1st generation runtimes, it is noted that (ie. for Python 2):

"Give Cloud Build permission to deploy apps in your project. When you deploy your app, App Engine uses Cloud Build to build the app into a container and deploy the container to the runtime. Cloud Build does not have permission to deploy Python 2 apps by default, so you need to give permission before you can deploy apps."

However, it is not mentioned when the change of using Cloud Build is roled out to the deployment process. So, I have created a feature request on the documentation to reflect this change on the documentation. I would like to add that, we welcome your feedbacks on different products and documentation. In the future, you may send your feedback directly to the product/documentation team by using the "Send Feedback" button located on the top-right or at the bottom of any page.  


Reply all
Reply to author
Forward
0 new messages