Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue setting up GCP for a second workspace #278

Open
JesseRuttTX opened this issue Apr 30, 2024 · 4 comments
Open

Issue setting up GCP for a second workspace #278

JesseRuttTX opened this issue Apr 30, 2024 · 4 comments

Comments

@JesseRuttTX
Copy link

Hi, I am a graduate student researcher trying to get my coiled workspace named dessler_workspace linked to a GCP project owned by my research advisor. Here are my current workspaces:

Screenshot 2024-04-29 at 9 07 59 PM

The jesse-rutt workspace is one I have linked to my personal GCP account and project. I am currently trying to link my dessler_workspace project to my advisors project so any costs will go through that project. When I run the command "coiled setup gcp" while my coiled workspace is set to default to dessler_workspace I get this error:

Screenshot 2024-04-29 at 9 11 42 PM

I asked my advisor to give me permissions and yet I still get the same error. These are the current roles in the project:

Screenshot 2024-04-29 at 9 05 07 PM

Thank you for any assistance you can provide.

@JesseRuttTX JesseRuttTX changed the title Issue setting up GCP for Issue setting up GCP for a second workspace Apr 30, 2024
@ntabris
Copy link
Member

ntabris commented Apr 30, 2024

The "Project IAM Admin" role doesn't let you create roles, it only has these permissions:

resourcemanager.projects.get
resourcemanager.projects.getIamPolicy
resourcemanager.projects.setIamPolicy

You'd need something like "Role Administrator" in order to create the roles.

There might be some additional required permissions, just for running setup. If your advisor is comfortable temporarily giving you "Editor" to run setup, that's probably the easiest way to ensure you can do everything required.

@JesseRuttTX
Copy link
Author

My advisor has changed my role to the "editor" role and yet I still seem to be getting the same error. Is there something else I am potentially doing wrong when trying to get my coiled workspace connected to the GCP project?

Error:
Screenshot 2024-05-05 at 3 57 07 PM

The roles in the GCP project:
Screenshot 2024-05-05 at 3 57 25 PM

@ntabris
Copy link
Member

ntabris commented May 6, 2024

Oh, I thought editor included this but now I'm looking at it doesn't. Sorry for the hassle!

For iam.roles.create, it looks like you need "Role Administrator" role.

I confirmed this by searching the predefined roles using https://cloud.google.com/iam/docs/understanding-roles

@JesseRuttTX
Copy link
Author

My role is now "Role Administrator", but I now get this error:

Screenshot 2024-05-07 at 10 58 21 AM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants