GCB | gcpdiag

Cloud Build service account has the cloudbuild.builds.editor role.

Builds don’t fail because its service account did not have registry permissions.

Builds don’t fail because of retention policy set on logs bucket.

Cloud Build Service Agent has the cloudbuild.serviceAgent role.