google-github-actions/deploy-cloud-functions failed with: failed to POST https://cloudfunctions.googleapis.com/v1/projects/centrifuge-production-x/locations/europe-central2/functions: (403) { "error": { "code": 403, "message": "Failed to create 1st Gen function projects/centrifuge-production-x/locations/europe-central2/functions/onboarding-api-production-production: Caller *** is missing permission 'iam.serviceaccounts.actAs' on service account onboarding-api-function@peak-vista-185616.iam.gserviceaccount.com. Grant the role 'roles/iam.serviceAccountUser' to the caller on the service account onboarding-api-function@peak-vista-185616.iam.gserviceaccount.com. You can do that by running 'gcloud iam service-accounts add-iam-policy-binding onboarding-api-function@peak-vista-185616.iam.gserviceaccount.com --member MEMBER --role roles/iam.serviceAccountUser' where MEMBER has a prefix like 'user:' or 'serviceAccount:'. Details and instructions for the Cloud Console can be found at https://cloud.google.com/functions/docs/reference/iam/roles#additional-configuration. Please visit https://cloud.google.com/functions/docs/troubleshooting for in-depth troubleshooting documentation.", "status": "PERMISSION_DENIED" } }

google-github-actions/deploy-cloud-functions failed with: failed to POST https://cloudfunctions.googleapis.com/v1/projects/centrifuge-production-x/locations/europe-central2/functions: (403) { "error": { "code": 403, "message": "Failed to create 1st Gen function projects/centrifuge-production-x/locations/europe-central2/functions/pinning-api-production-production: Caller *** is missing permission 'iam.serviceaccounts.actAs' on service account pinning-api-function@peak-vista-185616.iam.gserviceaccount.com. Grant the role 'roles/iam.serviceAccountUser' to the caller on the service account pinning-api-function@peak-vista-185616.iam.gserviceaccount.com. You can do that by running 'gcloud iam service-accounts add-iam-policy-binding pinning-api-function@peak-vista-185616.iam.gserviceaccount.com --member MEMBER --role roles/iam.serviceAccountUser' where MEMBER has a prefix like 'user:' or 'serviceAccount:'. Details and instructions for the Cloud Console can be found at https://cloud.google.com/functions/docs/reference/iam/roles#additional-configuration. Please visit https://cloud.google.com/functions/docs/troubleshooting for in-depth troubleshooting documentation.", "status": "PERMISSION_DENIED" } }