Deploying to flexible environment failure when accessing the docker image on us.gcr.io

[John Del Rosario]

I'm exploring migrating our existing AppEngine app to Flexible Environment, but I'm running into issues deploying. 

The build process for the image is successful, and I can even browse the images in my project's Container Registry page (https://console.cloud.google.com/kubernetes/images/tags/appengine).

But the `deploy` command fails with the following message:

ERROR: (gcloud.app.deploy) Error Response: [3] Docker image us.gcr.io/my-project/appengine/flexibletest.20160822t162239:latest was either not found, or you do not have access to it.

So it seems I'm able to build and upload the images, browse them in the console UI, but I can't deploy?

Here's the complete output of the `deploy` command:

$ gcloud app deploy appengine/app.flexibletest.yaml --project=my-project

WARNING: The "module" parameter in application .yaml files is deprecated. Please use the "service" parameter instead.

You are about to deploy the following services:

 - my-project/flexibletest/20160822t162239 (from [/Users/john/Projects/my-project/appengine/app.flexibletest.yaml])

     Deployed URL: [https://flexibletest-dot-my-project.appspot.com]

Do you want to continue (Y/n)?  y

WARNING: We couldn't validate that your project is ready to deploy to App Engine Flexible Environment. If deployment fails, please try again.

Beginning deployment of service [flexibletest]...

WARNING: Deployment of App Engine Flexible Environment apps is currently in Beta

Building and pushing image for service [flexibletest]

Started cloud build [204fca53-083b-4484-80f3-b07a1f9444a9].

To see logs in the Cloud Console: https://console.developers.google.com/logs?project=my-project&service=cloudbuild.googleapis.com&key1=204fca53-083b-4484-80f3-b07a1f9444a9&logName=projects/my-project/logs/cloudbuild

-------------------------------------- REMOTE BUILD OUTPUT ---------------------------------------

starting build "204fca53-083b-4484-80f3-b07a1f9444a9"

FETCHSOURCE

Fetching storage object: gs://staging.my-project.appspot.com/us.gcr.io/my-project/appengine/flexibletest.20160822t162239:latest#1471854189088000

Copying gs://staging.my-project.appspot.com/us.gcr.io/my-project/appengine/flexibletest.20160822t162239:latest#1471854189088000...

Downloading file:///tmp/source-archive.tgz:                      2.71 MiB/2.71 MiB

BUILD

Already have image (with digest): gcr.io/cloud-builders/docker

Sending build context to Docker daemon 10.06 MB

Step 1 : FROM gcr.io/google_appengine/python-compat-multicore

 ---> 41ee68b79e5f

Step 2 : ADD . /app/

 ---> 698042776bc1

Removing intermediate container 37b8f15bb236

Step 3 : RUN if [ -s requirements.txt ]; then pip install -r requirements.txt; fi

 ---> Running in 659bdca2190f

# ... installing python requirements ... #

 ---> 082585474ebc

Removing intermediate container 659bdca2190f

Successfully built 082585474ebc

PUSH

The push refers to a repository [us.gcr.io/my-project/appengine/flexibletest.20160822t162239] (len: 1)

082585474ebc: Preparing

082585474ebc: Pushing

082585474ebc: Pushed

698042776bc1: Preparing

698042776bc1: Pushing

698042776bc1: Pushed

41ee68b79e5f: Image already exists

160faa480f99: Image already exists

54af9b849c12: Image already exists

f7665061ea9b: Image already exists

f0ce2cd4c34e: Image already exists

1f36ec60b168: Image already exists

dba2cb21847e: Image already exists

0b438adde2bd: Image already exists

3ebe7e1dbd81: Image already exists

85da8a999491: Image already exists

6386685d47d6: Image already exists

33ef92ed9b42: Image already exists

d294b4850b25: Image already exists

096d9403d234: Image already exists

latest: digest: sha256:909bcac323b93f6df5d0a892208cbc79a0db37fc9f13eaf4cb9980755d0aa80f size: 52458

DONE

--------------------------------------------------------------------------------------------------

# ... removed ignored files warning ... #

File upload done.

Updating service [flexibletest]...failed.

ERROR: (gcloud.app.deploy) Error Response: [3] Docker image us.gcr.io/my-project/appengine/flexibletest.20160822t162239:latest was either not found, or you do not have access to it.

[Justin Beckwith]

Greetings!  I've added a few engineers from our team who may be able to help out here.  We're taking a look.  

--
You received this message because you are subscribed to the Google Groups "google-cloud-sdk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sdk+unsubscribe@googlegroups.com.
Visit this group at https://groups.google.com/group/google-cloud-sdk.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sdk/ee019e56-b5ee-431e-9b9d-d643ebbd9c6b%40googlegroups.com.

--

Justin Beckwith | Google Cloud Platform | @justinbeckwith | http://jbeckwith.com

[周世恩]

I found the problem.

I have a project which was created in 2012. There is no App Engine Default Service Account in service account list of my project so that I got the error ERROR: (gcloud.app.deploy) Error Response: [3] Docker image ... was either not found, or you do not have access to it. Are there any solutions to add App Engine Default Service Account back?

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-s...@googlegroups.com.

Visit this group at https://groups.google.com/group/google-cloud-sdk.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sdk/ee019e56-b5ee-431e-9b9d-d643ebbd9c6b%40googlegroups.com.

[John Del Rosario]

Interesting. Our project is pretty old as well, created around ~2012.

[Justin Beckwith]

Alright, so this isn't pretty, but I have a fix for you :)  There's a `repair` endpoint in the App Engine Admin API that resolves these kinds of issues.  You can read about it here:

https://cloud.google.com/appengine/docs/admin-api/reference/rest/v1/apps/repair

You can actually enter your project name in the appId field, click 'execute', and it will re-add the service account.  We obviously want to make this a little prettier, but hopefully that helps. 

Let us know if it works for you!

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sdk+unsubscribe@googlegroups.com.

Visit this group at https://groups.google.com/group/google-cloud-sdk.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sdk/4bbd4557-abe8-4ac0-9414-3a1f90f5fb5e%40googlegroups.com.

[John Del Rosario]

Hi,

Our project now has the App Engine Default Service Account, but when deploying I'm still getting the same error about the Docker image being unavailable or having no access to it.

@周世恩 is it working for you?

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sdk/4bbd4557-abe8-4ac0-9414-3a1f90f5fb5e%40googlegroups.com.

[Fawad Niazi]

Hi,

I'm Having the same issue, any update on this is much appreciated.

[Señor Luis Daniel Ballesteros]

Could you verify that your Docker image is in v2 format?  This might cause us to be unable to use your image during deployment.

FAQ

https://cloud.google.com/container-registry/docs/ui

I can help you debug this issue if you privately mail me your project id.

[Tristan Shephard]

I'm hitting the same issue, except my error message reads "was either not found, or is not in Docker V2 format." (which I believe is an update in the new SDK - I'm on version 127.)

According to my container registry the image is present and in V2 format, so I'm at a bit of a loss. I've deployed the same service successfully on a separate project.

Best,

Tristan

[Igor Khrol]

I have the same issues. http://stackoverflow.com/questions/40008503/error-deploying-gae-flex-service
What is strange that I'm able to deploy the application to some projects but not to other.

`gcloud app deploy ./src/main/appengine/app.yaml` gives me different results depending what google project is selected in `gcloud init`.