Google Compute Engine: Required 'compute.zones.get' permission error

in my case I deleted the service accounts / IAM's or whatever and that very same error message popped up, when I tried to create a kubernetes cluster.

I asked Google to recreate my service accounts, and they mentioned that you can recreate service accounts and their permissions simply by enabling them again. So, in my case I ran the following two commands in order to make kubernetes work again:

gcloud services enable compute
gcloud services enable container

Here is the link they gave me: https://issuetracker.google.com/64671745#comment2

This sort of issue might arise if somehow your cloudservices robot gets removed as a project editor. My best guess is that in your case this is the issue.

This might happen due to API call which has SetIamPolicy that is missing cloudservices robot from the "roles/editor" bindings. SetIamPolicy is a straight PUT, it will override with whatever policy is provided in the request. You can get the list of IAM policies for your project with below command as given in this article.

gcloud projects get-iam-policy [project-id]

From the list, you can check whether below service account has the editor permission or not.

[id]@cloudservices.gserviceaccount.com

To fix the issue, you can grant the mentioned service account "Editor" permission and check whether that solves the issue or not.

Hope this helps.

I think I got it. I tried to follow the advice from GitHub. The permissions I needed to set on my account (called [email protected]) were:

roles/compute.instanceAdmin roles/editor roles/iam.serviceAccountUser

The last one seemed to be crucial.