Missing required permissions opsconfigmonitoring.resourceMetadata.write for service account

[muanang]

Hello,

I'm trying to install Anthos on bare metal and also a beginner in GCP. 

Following the steps here , when I check my config, I can see errors like below;

E0922 23:32:33.165088  155692 logs.go:69]  "msg"="Failed to bootstrap." "error"="create kind cluster failed: error validating cluster config: 1 error occurred:\n\t* ClusterOperations check failed: Missing required permissions opsconfigmonitoring.resourceMetadata.write for service account projects/first-fuze-325814/serviceAccounts/logging-monitoring-svc-account@first-fuze-325814.iam.gserviceaccount.com\n\n"  
E0922 23:32:33.165100  155692 console.go:84] create kind cluster failed: error validating cluster config: 1 error occurred:
        * ClusterOperations check failed: Missing required permissions opsconfigmonitoring.resourceMetadata.write for service account projects/first-fuze-325814/serviceAccounts/logging-monitoring-svc-account@first-fuze-325814.iam.gserviceaccount.com

Would like to ask for your help or if you can point me to some links to fix my issue.

Any help is highly appreciated.

Thank you.

MD

[muanang]

By the way, also would like to add.. I ran these binding below..

gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:baremetal-gcr@$PROJECT_ID.iam.gserviceaccount.com" \
  --role="roles/opsconfigmonitoring.resourceMetadata.writer"


gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:baremetal-gcr@$PROJECT_ID.iam.gserviceaccount.com" \
  --role="roles/monitoring.editor"

[muanang · Accepted solution]

I got it fix by running the command below;

gcloud projects add-iam-policy-binding $PROJECT_ID \
    --member="serviceAccount:logging-monitoring-svc-account@$PROJECT_ID.iam.gserviceaccount.com" \
    --role="roles/monitoring.editor"