Terraform. Create cloud app

[Andrey123321]

I wanted create cloud run with terraform.
But i got error 'Error: Error creating Service: googleapi: Error 403: The caller does not have permission'

I used service key with rights 'owner' and i can create static website with this accaunt .
What is happaed, help my please..

[robertcarlos]

Hi @Andrey123321,

Welcome to Google Cloud Community!

Based on your error message, there are several factors that you get the error 403. According to this documentation on troubleshooting terraform on gcloud: 

• There's no email address associated with it
• There's an email address but it's not the service account that you want to impersonate
• Proper permissions are not set

For us to resolve it, we need to make sure that the following criteria are met:

• Make sure that your authentication is working properly.
• Make sure that your service account impersonation is set up correctly
• Make sure that it has the following permissions on the project:
  • getIamPolicy
  • resourcemanager.projects.get

You may also check these Stack Overflow questions that would also resolve the error that you get:

• Error 403, "The caller does not have permission" when trying to impersonate Service Account in GCP 
• How to resolve "googleapi: Error 403: The caller does not have permission, forbidden"