I can not run deploy in the "Managing infrastructure as code with Terraform, Cloud Build, and GitOps

[anlex_N]

I can not run Managing infrastructure as code with Terraform, Cloud Build, and GitOps 

step: Click Show all checks and wait for the check to become green. can not pass

Managing infrastructure as code with Terraform, Cloud Build, and GitOps docs use service accout: projectNumber@cloudbuild.gserviceaccount.com

But I can not select this service accout when I create Cloud Build trigger. and service account must be selected. so I tried to select "my-service-account@even-autonomy-464301-n0.iam.gserviceaccount.com" and give it correct role, however, build is still failed.

I insert "logsBucket: 'gs://even-autonomy-464301-n0-tfstate'" into cloudbuild.yaml, build is success.

But how to not update cloudbuild.yaml so that build also can be success?

If cloudbuild.yaml really need to be updated, I can contribute source code to original repo , but original repo have so many pull requests to merge, so I think original repo is not health.

[francislouie · Accepted solution]

Hi anlex_N,

Welcome to Google Cloud Community!

I tried to follow the tutorial/guide and encountered the same error.

If you're using a user-specified service account, please follow the relevant guide. For legacy service accounts, review the applicable Organization Policies/Organization Policy Constraints. As a best practice, it is recommended that you specify your own service account to run your builds.

As a workaround you have three option:

1. specify build.logs_bucket
2. specify CLOUD_LOGGING in the yaml file
3. specify NONE in the yaml file. 

Additionally, a relevant thread on the GCC forum that might help you. 

Was this helpful? If so, please accept this answer as “Solution”. If you need additional assistance, reply here within 2 business days and I’ll be happy to help.

[anlex_N]

@francislouie 

Thanks, you are my friend! Can you give me your email / discord id? I want to add you to my contacts.