Google Service Control API failed with: 403

241 views
Skip to first unread message

Jatin Naudiyal

unread,
Sep 21, 2022, 12:10:35 PM9/21/22
to Google Cloud Endpoints
Hi

I was deploying my anthos microservices using GKE cluster. When I am trying to login into the portal, it throws POST 500 error. I checked in to the logs of my anthos service, I got below logs :

0][filter]Failed to call report, error: PERMISSION_DENIED:Calling Google Service Control API failed with: 403 and body: \010\007\022dPermission \'servicemanagement.services.report\' denied for the consumer project (or it may not exist), str body: \010\007\022dPermission \'servicemanagement.services.report\' denied for the consumer project (or it may not exist) 

I have given all the required permission to the service account which I am using to deploy.
Permission I have given :
1. Service Controller
2. Service Management Administrator
3. Service Usage Consumer
4. Service Config Editor
5. Editor (Not required, for testing)

Is it because of endpoint or something, I didn't get it.

Any help is greatly appreciated.

Thanks
Jatin

DISCLAIMER:The entire content of this email message is confidential. This also applies to any files attached to it. This email is intended for an individual or entity to whom they are addressed. In case you are not the addressee of this email, and you have received it in error, immediately contact the system manager. The information in this email is very sensitive, and it is intended for the specific addressee. This email should not be disseminated, distributed or copied. If you have received this email and it was not for you, make sure to immediately notify the sender by email and afterwards delete this email from your system. Disclosing, copying, distributing, or taking any action in reliance to the email content is strictly prohibited. Consider yourself notified.

Wayne Zhang

unread,
Sep 21, 2022, 12:48:12 PM9/21/22
to Jatin Naudiyal, Google Cloud Endpoints
Please check out this [step](
https://cloud.google.com/endpoints/docs/openapi/get-started-kubernetes-engine-espv2#checking_required_permissions). Please double check the "service" you are setting the "serviceController" role with for this SA

Thanks

-Wayne

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/a909c877-b716-4995-9843-1d3b87a38966n%40googlegroups.com.
Reply all
Reply to author
Forward
0 new messages