[SOLVED] Github Actions - Permission 'iam.serviceaccounts.actAs' denied on service account

[cloud dust]

Hi, as seen in the subject I'm having trouble figuring out why I'm not able to successfully deploy my cloud run app through GHA.

I've done some googling and found that the roles: Service Account User and Cloud Run Service Agent need to be added to the service account which I have done. I have also added the Cloud Run Admin role at the project level to the same account, but even with these roles I receive the same error message.

Please let me know if you need more info to solve this. Thanks!

[cloud dust]

I figured it out!

So even though the error message mentions [PROJECT-ID][email protected], you need to add the service account in your workflow file as a principal for "Default compute service account".