All our deployment actions appear to be failing due to errors deploying to App Engine.
Example: https://github.com/acteng/atip/actions/runs/25746694820/job/75611756709
From Google log explorer:
Failed to create cloud build: com.google.net.rpc3.client.RpcClientException: <eye3 title='/ArgoAdminNoCloudAudit.CreateBuild, INVALID_ARGUMENT'/> APPLICATION_ERROR;google.devtools.cloudbuild.v1/ArgoAdminNoCloudAudit.CreateBuild;build.service_account must be specified due to the evaluation of the following org policies:
"constraints/cloudbuild.disableCreateDefaultServiceAccount"
"constraints/cloudbuild.useBuildServiceAccount"
"constraints/cloudbuild.useComputeServiceAccount"
Please check the value of these constraints and visit https://cloud.google.com/build/docs/cloud-build-service-account-updates for information on setting
This appears to be because of org policy changes meaning the build step of App Engine deploy can no longer use the default service account.
All our deployment actions appear to be failing due to errors deploying to App Engine.
Example: https://github.com/acteng/atip/actions/runs/25746694820/job/75611756709
From Google log explorer:
This appears to be because of org policy changes meaning the build step of App Engine deploy can no longer use the default service account.