[build-streamlit-rag-agent-google-adk-cloud-run] Issue description

[phanikumarveeranki-arch]

this is the correct command to use

phani_kumar_veeranki@cloudshell:/coffee-barista-agent (drowhhz-agbg-gemini-costco)$ gcloud run deploy coffee-barista --source . --region $REGION --allow-unauthenticated --labels dev-tutorial=codelab-streamlit-rag-adk --command "/cnb/lifecycle/launcher" --args "sh,-c,python3 -m streamlit run app.py --server.port=$PORT --server.address=0.0.0.0 --server.enableCORS=false --server.enableXsrfProtection=false" --service-account "barista-agent-sa@$PROJECT_ID.iam.gserviceaccount.com" --build-service-account "projects/$PROJECT_ID/serviceAccounts/barista-agent-sa@$PROJECT_ID.iam.gserviceaccount.com" --set-env-vars GOOGLE_GENAI_USE_VERTEXAI=TRUE,GOOGLE_CLOUD_PROJECT=$PROJECT_ID,GOOGLE_CLOUD_LOCATION=global
Building using Buildpacks and deploying container to Cloud Run service [coffee-barista] in project [drowhhz-agbg-gemini-costco] region [us-central1]
Building and deploying new service...
Validating configuration...done
Uploading sources...done
Building Container... Logs are available at [ https://console.cloud.google.com/cloud-build/builds;region=us-central1/f
a58a631-ff79-429f-92b5-1a247cf28d26?project=804571161195 ]....done
Setting IAM Policy...done
Creating Revision...done
Routing traffic...done
Done.
Service [coffee-barista] revision [coffee-barista-00001-t8h] has been deployed and is serving 100 percent of traffic.
Service URL: https://coffee-barista-804571161195.us-central1.run.app
phani_kumar_veeranki@cloudshell:/coffee-barista-agent (drowhhz-agbg-gemini-costco)$

"build-service-account" is missing in the lab.

Also add the roles for the service account, else the deployment is getting failed

roles/run.builder — execute Cloud Build
roles/storage.objectViewer — read staging bucket
roles/artifactregistry.writer — push/pull container images

Please validate and fix the same