Cloud Run service agent does not have permission to get access tokens for the service account
Google Cloud Run Service Agent does not have permission to get access tokens for the service account.
Cloud Run could not create or update the service because its service agent lacks the required permission to mint access tokens for the configured service account.
Google Cloud Run Service Agent does not have permission to get access tokens for the service account.authentication
Observed message
Google Cloud Run Service Agent does not have permission to get access tokens for the service account.
Why it happens
The Cloud Run service agent is missing access token creation rights on the selected service account.
Cross-project service identity permissions are incomplete.
The deployment uses a service account that the Cloud Run service agent cannot impersonate.
How to fix it
Grant the Cloud Run service agent permission to create access tokens for the configured service account.
Check whether the service account is in another project and add the required cross-project permissions.
Verify that the deployment is referencing the intended service account.
