Did anyone run into issue with Flyte retrieving items from storage blob?

[1/1] currentAttempt done. Last Error: USER::load_distribution(additional_distribution, dest_dir)      │
│                                                                              │
│ /usr/local/lib/python3.10/site-packages/flytekit/core/utils.py:295 in        │
│ wrapper                                                                      │
│                                                                              │
│ ❱ 295 │   │   │   │   return func(*args, **kwargs)                           │
│                                                                              │
│ /usr/local/lib/python3.10/site-packages/flytekit/tools/fast_registration.py: │
│ 113 in download_distribution                                                 │
│                                                                              │
│ ❱ 113 │   FlyteContextManager.current_context().file_access.get_data(additio │
│                                                                              │
│ /usr/local/lib/python3.10/site-packages/flytekit/core/data_persistence.py:30 │
│ 1 in get_data                                                                │
│                                                                              │
│ ❱ 301 │   │   │   raise FlyteAssertion(                                      │
╰──────────────────────────────────────────────────────────────────────────────╯
FlyteAssertion: Failed to get data from 
<gs://flyte-blob-storage/flytesnacks/development/MHEQCB3WRLH247GOTRY3CZQIWE======>
/fastea66e2416c583fdc6995e9e030c414bf.tar.gz to /root/ (recursive=False).

Original exception: 403, message='Forbidden', 
url=URL('<https://storage.googleapis.com/download/storage/v1/b/flyte-blob-storage>
/o/flytesnacks%2Fdevelopment%2FMHEQCB3WRLH247GOTRY3CZQIWE======%2Ffastea66e2416c
583fdc6995e9e030c414bf.tar.gz?alt=media')

The

https

link seems to include extra entries which results in

403 error

Seems permission issue Ensure the flyte gsa have correct permission to the storage bucket you created for flyte

how do we get the pods in new namespaces use the service account defined in clusterResourceTemplates? now they seem to use default SA which does not have correct IAM bindings