2
votes

We are unable to create Kubernetes clusters in our Google Cloud project. It was working a few weeks ago. We keep getting the following error:

Google Compute Engine: Required 'compute.zones.get' permission for 'projects/<project code>/zones/us-central1-a'

However, the role assigned to the user trying to create the cluster is Project/Owner, and the service account selected when creating the cluster has Project/Editor, which includes the compute.zones.get permission. Even if I give the service account Project/Owner it still gives the same error.


EDIT

When trying to create the cluster with gcloud we get a different (similar) error:

Google Compute Engine: Required 'compute.networks.get' permission for 'projects/<project code>/global/networks/default'

3

3 Answers

0
votes

Not sure what went wrong, but the fix was to disable all the compute services, and then re-initialising the Kubernetes service.

0
votes

You lack the cloudservices service account in IAM. A current workaround for this issue is to re-enable the Google Cloud Compute Engine API.

0
votes

I wasn't able to disable the Compute API due to an apparent dependency loop, but creating a new GCP project "fixed" this for me.