Deploy(publish) application integration that contain pub/sub trigger on it

[rafa1995]

I have an issue that when im trying to deploy an application integrarion that contains pub/sub trigger on it i got this error :

failed to publish integration version. Error: Failed while deploying Cloud Pubsub Trigger for integration test-pubsub (41b67179-a0b3-4739-a918-1221f58ee447). Reason: Necessary roles might be missing for Cloud Pub/Sub Trigger.


and my service account have those permissions : 

• Cloud Build Service Account
• Cloud Functions Admin
• Cloud SQL Admin
• Connector Admin
• Custom Role Application Integration
• Logs Writer
• Pub/Sub Admin
• Secret Manager Secret Accessor
• Service Account User

Can anyone tell me what permissions i need to deploy my integration ? 

 

[ssvaidyanathan]

@rafa1995 - looks like you dont have access to set permissions on the service account. Check this page

[rafa1995]

@ssvaidyanathan  Yes i don't have permission to do that We have a team that can grant service accounts permissions this is why i was asking about all permissions that i need in order to publish my integration 

[hartmann]

Hello @rafa1995 the following should resolve your issue:

• The Application Integration Service Account (service-PROJECT_NUMBER@gcp-sa-integrations.iam.gserviceaccount.com) should be granted the "Pub/Sub Editor" and "Service Account User" role on the project in which the Pub/Sub topic exists
• The service account utilized within the trigger context (which should be the service account noted above) requires the "Application Integration Invoker" permission set

Please let me know if this helps or if you have any additional questions/concerns - thanks!