Deploy API Proxy using the Apigee Maven plugin and Cloud Build

[ahmadmahafdhah]

I was trying to build the CI/CD pipeline for deploying proxies using the maven plugin and Cloud Build, with the help of using this sample:
https://github.com/GoogleCloudPlatform/apigee-samples/tree/main/deploy-apigee-proxy

is it possible to find a list of all required permissions that I should grant for the service account which will be running the Cloud Build Trigger to deploy the proxies?
I am trying to get only required permissions not roles.

[AlexET]

Hi @ahmadmahafdhah, just wanted to acknowledge your question—we’ll make sure it gets noticed and invite others to help out.

In the meantime, check out this recording: Spec-Driven Development for Apigee A fully automated CI/CD Approach.

Thanks for contributing to the community!

[markjkelly · Accepted solution]

Hi @ahmadmahafdhah - I was able to deploy the sample using a Cloud Build Service Account with a custom role with the following Apigee permissions:

apigee.deployments.create
apigee.deployments.get
apigee.deployments.invoke
apigee.deployments.update
apigee.proxies.create
apigee.proxies.get
apigee.proxies.update
apigee.proxyrevisions.deploy
apigee.proxyrevisions.get
apigee.proxyrevisions.update

[AlexET]

Hey @ahmadmahafdhah, just checking in! Did Mark’s suggestion help resolve your issue? If so, feel free to mark it as a solution—it helps others too!

Big thanks to @markjkelly for jumping in and sharing insights!

Looking forward to your update!

[ahmadmahafdhah]

Hello @AlexET 

Thanks for reaching out, yes it is working fine to me with the mentioned permissions.

and I just marked it as an Accepted Solution.

[ahmadmahafdhah]

Thank you @markjkelly for the effort on specifying the required permissions.