Missing required permissions opsconfigmonitoring.resourceMetadata.write for service account

Google Cloud Serverless Applications
1

Hello,

I’m trying to install Anthos on bare metal and also a beginner in GCP.

Following the steps here , when I check my config, I can see errors like below;

E0922 23:32:33.165088  155692 logs.go:69]  "msg"="Failed to bootstrap." "error"="create kind cluster failed: error validating cluster config: 1 error occurred:\n\t* ClusterOperations check failed: Missing required permissions opsconfigmonitoring.resourceMetadata.write for service account projects/first-fuze-325814/serviceAccounts/logging-monitoring-svc-account@first-fuze-325814.iam.gserviceaccount.com\n\n"  
E0922 23:32:33.165100  155692 console.go:84] create kind cluster failed: error validating cluster config: 1 error occurred:
        * ClusterOperations check failed: Missing required permissions opsconfigmonitoring.resourceMetadata.write for service account projects/first-fuze-325814/serviceAccounts/logging-monitoring-svc-account@first-fuze-325814.iam.gserviceaccount.com

Would like to ask for your help or if you can point me to some links to fix my issue.

Any help is highly appreciated.

Thank you.

MD

2

By the way, also would like to add.. I ran these binding below..

gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:baremetal-gcr@$PROJECT_ID.iam.gserviceaccount.com" \
  --role="roles/opsconfigmonitoring.resourceMetadata.writer"

gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:baremetal-gcr@$PROJECT_ID.iam.gserviceaccount.com" \
  --role="roles/monitoring.editor"
3

I got it fix by running the command below;

gcloud projects add-iam-policy-binding $PROJECT_ID \
    --member="serviceAccount:logging-monitoring-svc-account@$PROJECT_ID.iam.gserviceaccount.com" \
    --role="roles/monitoring.editor"
1 Like