GCP Vertex AI Service Agent access to GCR image Error

Viewed 707

I am getting the below error. Does anyone have any idea how to solve it?

Failed to create pipeline job. Error: Vertex AI Service Agent 
'XXXXX@gcp-sa-aiplatform-cc.iam.gserviceaccount.com' should be granted
 access to the image gcr.io/gcp-project-id/application:latest
2 Answers

{PROJECT_NUMBER}@gcp-sa-aiplatform-cc.iam.gserviceaccount.com is google's AI Platform service agent. This Service agent requires access to read/pull the docker image from your project's gcr to create container for pipeline run.

If You have permission to edit IAM roles, You can try adding Artifact Registry roles to the above service agent. You can start with adding roles/artifactregistry.reader.

Hope this helps :)

This error may have occurred due to missing roles or permissions for pulling and pushing images into Container Registry. All the users and service accounts must be given appropriate permissions for Cloud Storage who interact with Container Registry. You can give roles/storage.objectViewer, roles/storage.legacyBucketWriter and roles/storage.admin to your service account to access your image in Container Registry using the service-account. You can follow this doc for giving appropriate roles and permissions to the Service Account.

Related