CopyGCSObjects validation failed if destination bucket has a retention policy

[rueian]

Hi, I would like to export my vm image to a bucket that having a retention policy. But the work flow will fail while validating copy-image-object step:

[image-export]: 2021-05-10T15:40:06+08:00 Validating workflow
[image-export]: 2021-05-10T15:40:06+08:00 Validating step "setup-disks"
[image-export]: 2021-05-10T15:40:08+08:00 Validating step "image-export-export-disk"
[image-export.image-export-export-disk]: 2021-05-10T15:40:08+08:00 Validating step "setup-disks"
[image-export.image-export-export-disk]: 2021-05-10T15:40:09+08:00 Validating step "run-image-export-export-disk"
[image-export.image-export-export-disk]: 2021-05-10T15:40:10+08:00 Validating step "wait-for-inst-image-export-export-disk"
[image-export.image-export-export-disk]: 2021-05-10T15:40:10+08:00 Validating step "delete-inst"
[image-export.image-export-export-disk]: 2021-05-10T15:40:10+08:00 Validating step "copy-image-object"
[image-export]: 2021-05-10T15:40:10+08:00 Error validating workflow: step "image-export-export-disk" validation error: step "copy-image-object" validation error: error deleting file &{c:0xc0003e4440 bucket:mybucket object:daisy-validate-copy-image-object-4v63q acl:{c:0xc0003e4440 bucket:mybucket object:daisy-validate-copy-image-object-4v63q isDefault:false userProject:} gen:-1 conds:<nil> encryptionKey:[] userProject: readCompressed:false} after write validation: googleapi: Error 403: Object 'mybucket/daisy-validate-copy-image-object-4v63q' is subject to bucket's retention policy and cannot be deleted, overwritten or archived until 2021-05-10T00:50:10.85271-07:00, forbidden
[image-export] 2021/05/10 15:40:11 step "image-export-export-disk" validation error: step "copy-image-object" validation error: error deleting file &{c:0xc0003e4440 bucket:mybucket object:daisy-validate-copy-image-object-4v63q acl:{c:0xc0003e4440 bucket:mybucket object:daisy-validate-copy-image-object-4v63q isDefault:false userProject:} gen:-1 conds:<nil> encryptionKey:[] userProject: readCompressed:false} after write validation: googleapi: Error 403: Object 'mybucket/daisy-validate-copy-image-object-4v63q' is subject to bucket's retention policy and cannot be deleted, overwritten or archived until 2021-05-10T00:50:10.85271-07:00, forbidden
panic: step "image-export-export-disk" validation error: step "copy-image-object" validation error: error deleting file &{c:0xc0003e4440 bucket:mybucket object:daisy-validate-copy-image-object-4v63q acl:{c:0xc0003e4440 bucket:mybucket object:daisy-validate-copy-image-object-4v63q isDefault:false userProject:} gen:-1 conds:<nil> encryptionKey:[] userProject: readCompressed:false} after write validation: googleapi: Error 403: Object 'mybucket/daisy-validate-copy-image-object-4v63q' is subject to bucket's retention policy and cannot be deleted, overwritten or archived until 2021-05-10T00:50:10.85271-07:00, forbidden

It seems that the validation is to create and delete a tmp file to validate permission, and therefore will fail if the bucket having a retention policy.

Is there any suggested workaround? Thanks.