Google Cloud is such a pain in the ass.
Things encountered today:
* I have an API key, I'm 98% sure it belongs to my organisation, there is no way to figure out where it came from in the UI because there's no unified view of stuff like this I can find.
* No, pathetic user with the "owner" role, you do not have permissions to access API keys via the CLI / SDK. Ok, but what if I impersonate this service account? Well, in that case, go right on ahead.
* You are not permitted to do this, you need to enable billing on this nonexistent project. Actual problem: incorrect permissions
* Fix permissions on a user, run command again, still fails, triple check permissions, they are correct, run command a third time, works.
This wasted half an hour of my morning.
That said the ability to see exactly what permission changes you're making to a user is pretty damn cool, even though you're changing permissions by assigning GCP managed roles which can change at any time.
AWS is deceptively simple cloud stuff that occasionally doesn't work for annoying and complicated reasons, but the threads to pull on are limited. Google Cloud is engineering cloud for engineers who understand Google Cloud and finding a solution when something simple and obvious doesn't work can be very very involved.
#gcp #googlecloud #tech #it