You may see new MCS catalog creation failure on Google Cloud Platform (GCP), with following error:

ErrorMessage":"Create Catalog failed with an unknown reason, see terminating error for more details.","SdkErrorId":3,"ErrorType":"ProvisioningTaskException","ErrorDetails":"Error Id: XDAPI:A1338B34\r\n\r\nException:\r\n DesktopStudio_ErrorId : ProvisioningTaskError\r\n ErrorCategory : NotSpecified\r\n ErrorID : FailedToReadDiskFromPreparationVm\r\n TaskErrorInformation : ImageName:/<Project name>/<region name>.region/<Virtual Machine name>.vm, StoragePath:, HostingUnitName:<Hosting connection name>\r\n InternalErrorMessage : Error in Cloud Build Log: [Daisy] Errors in one or more workflows:\r\n Step #1: image-export-ext: step \"export-disk\" run error: step \"wait-for-inst-export-disk\" run error: WaitForInstancesSignal FailureMatch found for \"<disk image name>\": \"ExportFailed: Failed to copy output image to GCS [Privacy-> gs://<GCP bucket storage bucket name>/daisy-image-<image name>/outs/export-disk, error: Copying file:///gs/<GCP bucket storage bucket name>/daisy-image-<image name>/outs/export-disk [Content-Type=application/octet-stream]...\"\r\n Finished Step #1\r\n ERROR\r\n ERROR: build step 1 \"gcr.io/compute-image-tools/daisy:<xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\" failed: step exited with non-zero status

Assign the roles:

At minimum, the specified Compute Engine service account needs to have the following roles assigned

• roles/compute.storageAdmin
• roles/storage.objectAdmin

Per this cloud.google.com article:
https://cloud.google.com/compute/docs/images/export-image#custom-service-account

Note: If other permissions have been modified in the roles. There may be other unexpected failures.

---

Problem Cause

Custom service account requires roles to be able to add data /images to Google Cloud Storage (GCS) which is missing