[Bug]: gemini-streamlit-cloudrun - default service account isn't granted correct permissions leading to failure

[ankurkotwal]

File Name

gemini/sample-apps/gemini-streamlit-cloudrun/README.md

What happened?

The command gcloud builds submit --tag "$GCP_REGION-docker.pkg.dev/$GCP_PROJECT/$AR_REPO/$SERVICE_NAME" fails as the default service account isn't granted the following permissions:

• storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).
• Permission "artifactregistry.repositories.uploadArtifacts" denied on resource

I used a new project that did not manually configure a service account. Once I granted the appropriate permissions to the default service account, the build was able to continue.

Relevant log output

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[rominirani]

The default service account gets created with the correct permissions if the SETUP.md file was run before executing some of the commands. This is mentioned in the README.md file. Please check if this was done.