`400 Invalid Value` - what to do?

[akauppi]

Was trying to use this for my repo, but stumped at this step:

$ GOOGLE_CLOUD_PROJECT=ci-builder gsutil iam ch serviceAccount:cloud-build-badge@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com:legacyObjectReader,legacyBucketWriter gs://${GOOGLE_CLOUD_PROJECT}-badges/
BadRequestException: 400 Invalid Value

Getting the same even after explicitly setting the GCP project:

$ gcloud config set project ci-builder

[leg100]

I can replicate the error message with the following:

gsutil iam ch serviceAccount:cloud-build-badge@.iam.gserviceaccount.com:legacyObjectReader,legacyBucketWriter gs://-badges/
BadRequestException: 400 Invalid Value

Which strongly suggests $GOOGLE_CLOUD_PROJECT isn't resolving to anything.

Setting a variable and running a command like this:

FOO=bar echo $FOO

Doesn't do what you expect, and instead prints out a blank line, because you're setting an environment variable not a shell variable and environment variables set this way are only made available to the child process:

cat > echo.sh
echo $FOO

FOO=bar sh echo.sh
bar

If you want to populate a variable with the name of the project, set a shell variable, by setting it on a separate line:

FOO=bar
echo $FOO
bar

So you want:

GOOGLE_CLOUD_PROJECT=ci-builder
gsutil iam ch serviceAccount:cloud-build-badge@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com:legacyObjectReader,legacyBucketWriter gs://${GOOGLE_CLOUD_PROJECT}-badges/