Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

facing error while adding kms in gke cluster.

When I create a GKE Cluster and adding the boot_disk_kms_key, then Its giver error this

Error: Error waiting for creating GKE cluster: Google Compute Engine: Not all instances running in IGM after 21.801186636s. Expected 1, running 0, transitioning 1. Current errors: [KMS_PERMISSION_DENIED]: Instance 'gke-test-gke-cluster-default-pool-4d67da56-j2s4' creation failed: Cloud KMS error when using key projects/ceq-devops-sandbox/locations/us-central1/keyRings/keyring-nodepool1/cryptoKeys/key-nodepool1: Permission 'cloudkms.cryptoKeyVersions.useToEncrypt' denied on resource 'projects/ceq-devops-sandbox/locations/us-central1/keyRings/keyring-nodepool1/cryptoKeys/key-nodepool1' (or it may not exist).
I already added this permission in my service account and also, I tried this to create a new service account. 

3 0 104