Skip to content

ops(gcp): fix Compute permission issue for serene-bazaar-666 or downgrade log level #247

Description

@cristim

GCP account serene-bazaar-666 is missing 'compute.regions.list' permission.

Visible in production Lambda logs:
[ERROR] GCP account GCP serene-bazaar-666 (serene-bazaar-666): get recommendations: failed to get regions: failed to list regions: googleapi: Error 403: Required 'compute.regions.list' permission for 'projects/serene-bazaar-666'

Two paths to fix:

  • Operator action (preferred): grant the GCP service account 'roles/compute.viewer' on the project.
  • Code-side mitigation: the collector could downgrade to [WARN] for permission errors specifically.

The collector's account-failure-swallow bug masks this entirely: the GCP provider is reported as successful even when this account fails.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions