Deploying JIT to App Engine

[ermal]

Hello, I am trying to deploy JIT to app engine, but am getting the following error in the build step of the deployment:

ERROR: failed to initialize analyzer: validating registry write access: ensure registry read/write access to us.gcr.io/xxxxx/xxxxx/xxxxx/default/xxxx-xxxxx-xxxx-xxxxx

Any help on this would be greatly appreciated!

Thanks

[robertcarlos]

Hi @ermal,

Welcome to Google Cloud Community!

You may want to check the role to the service account for JIT. Cloud Debugger Agent role should be granted:

gcloud projects add-iam-policy-binding $(gcloud config get-value core/project) \
    --member "serviceAccount:$SERVICE_ACCOUNT" \
    --role "roles/clouddebugger.agent"

You may want to check this documentation on managing just-in-time privileged access to projects for additional information.

If you have already set this up, you may want to file a bug or contact Google Cloud Support in order to provide additional support for your concern.