cloud build example workflow throwing VPC-SC security issue for logging bucket #281
Closed as not planned
Description
TL;DR
Trying to run the example workflow and getting the following error:
ERROR: (gcloud.builds.submit)
The build is running, and logs are being written to the default logs bucket.
Unfortunately, the default logs bucket is always outside any VPC-SC security
perimeter, so this tool cannot stream the logs for you.
If you want your logs saved inside your VPC-SC perimeter, use your own bucket.
See https://cloud.google.com/build/docs/securing-builds/store-manage-build-logs.
Expected behavior
I expected it to submit to the container registry but it stops at this error, please let me know if its a config error from my end.
Observed behavior
Reproduction
Action YAML
- name: Set up Cloud SDK
uses: google-github-actions/setup-gcloud@master
with:
project_id: $PROJECT_ID
service_account_key: ${{ secrets.GCP_SA_KEY }}
export_default_credentials: true
# Build and push image to Google Container Registry
- name: Build
run: |-
gcloud builds submit \
--quiet \
--tag "gcr.io/$PROJECT_ID/$SERVICE_NAME:$GITHUB_SHA"```