Certificate Manager PERMISSION_DENIED: Read access to project 'xxx' was denied

[chris-maplabs]

Was tearing down some unused resources with Terraform, and inadvertently disabled certificatemanager.googleapis.com, leading to 403's from the API.

Re-enabled with gcloud services enable certificatemanager.googleapis.com

After an hour or so, still seeing denied reads from the API.  Console is similar, Sorry, the server was not able to fulfill your request.

> gcloud certificates list
ERROR: (gcloud.certificate-manager.certificates.list) PERMISSION_DENIED: Read access to project 'xxx' was denied

Is there any specific method to re-enable Certificate Manager, or an out of band procedure necessary to res

[chris-maplabs]

Currently 2 days with 100% error rates on any request to certificate manager, using an account with Owner role.  

❯ gcloud --project gxxx certificate-manager certificates list
ERROR: (gcloud.certificate-manager.certificates.list) PERMISSION_DENIED: Read access to project 'xxx' was denied

Can't disable the api, the disable operation fails.  Enable does nothing.