fixed bug Permission denied on Cloud KMS key. Please ensure that your…

[amansingh14]

After enabling encryption on the bucket for compliance, Getting the below error while deploying the 0-bootstrap stage.

│ 
│   with module.cloudbuild_bootstrap.google_storage_bucket.cloudbuild_artifacts,
│   on ../modules/cloudbuild/main.tf line 77, in resource "google_storage_bucket" "cloudbuild_artifacts":
│   77: resource "google_storage_bucket" "cloudbuild_artifacts" {
│ 
╵

Solution: GCP has a bucket service account which needs to have roles/cloudkms.cryptoKeyEncrypterDecrypter assigned.