hello, when trying the hello cloud example im getting

google.api_core.exceptions.Forbidden: 403 GET <https://storage.googleapis.com/download/storage/v1/b/metaflow-public-storage/o/HelloCloudFlow%2Fdata%2Fda%2Fdadabe621cbdd542a7e10d102a43f217bdc4c3f0?alt=media>: Caller does not have storage.objects.get access to the Google

but in the description of the pod i can see that

metaflow/user: <mailto:local-dev@company.iam.gserviceaccount.com|local-dev@company.iam.gserviceaccount.com>

is set and that user has the perms for this operation. is this the correct user to solve this problem or is the caller another one to be set?

@hundreds-engineer-66892 you would have to ensure that the pod has necessary privileges to connect to gcs (via say a service account or otherwise). the user's local permissions do not get carried over to kubernetes.

the name there is local dev but it is a service account on the pod