I get an error that gs:// path can not be read by service account

Question

The GCS buckets I\'m using for my ML jobs are encountering an access error. How do I make sure the service account has the required privileges?

Answer 1

Make sure to allow the service account to read/write to your bucket.

You will also need to change the default acl on your bucket so that new objects created in that bucket can be read by the service account.

You can do this using these two gsutil commands:

gsutil acl ch -u $SVCACCT:WRITE gs://$BUCKET/
gsutil defacl ch -u $SVCACCT:O gs://$BUCKET/