Why does gsutil cp require storage.objects.delete on versioned bucket?
问题 I'm using a service account to upload a file to Google Cloud Storage bucket that has versioning. I want to keep the service account privileges minimal, it only ever needs to upload files so I don't want to give it permission to delete files, but the upload fails (only after streaming everything!) saying it requires delete permission. Shouldn't it be creating a new version instead of deleting? Here's the command: cmd-that-streams | gsutil cp -v - gs://my-bucket/${FILE}