Unable to deploy to Cloud Run

[charlesdassonville]

** Please make sure you read the contribution guide and file the issues in the right place. **
Contribution guide.

Describe the bug
Updating from 1.20 to 1.21 lead to bug in the Cloud Run Deployment

To Reproduce
Please share a minimal code and data to reproduce your problem.
Steps to reproduce the behavior:

1. Update adk to 1.21
2. Run adk deploy cloud_run
3. Container failed to start
4. Traceback
   Traceback (most recent call last):
   File "/home/myuser/.local/bin/adk", line 8, in
   sys.exit(main())
   ^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/click/core.py", line 1485, in call
   return self.main(*args, **kwargs)
   ^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/click/core.py", line 1406, in main
   rv = self.invoke(ctx)
   ^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/click/core.py", line 1873, in invoke
   return _process_result(sub_ctx.command.invoke(sub_ctx))
   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/click/core.py", line 1269, in invoke
   return ctx.invoke(self.callback, **ctx.params)
   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/click/core.py", line 824, in invoke
   return callback(*args, **kwargs)
   ^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/click/decorators.py", line 34, in new_func
   return f(get_current_context(), *args, **kwargs)
   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/google/adk/cli/cli_tools_click.py", line 1101, in wrapper
   return func(*args, **kwargs)
   ^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/google/adk/cli/cli_tools_click.py", line 942, in wrapper
   return func(*args, **kwargs)
   ^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/google/adk/cli/cli_tools_click.py", line 417, in wrapper
   return func(*args, **kwargs)
   ^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/google/adk/cli/cli_tools_click.py", line 979, in wrapper
   return func(*args, **kwargs)
   ^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/google/adk/cli/cli_tools_click.py", line 1177, in cli_web
   app = get_fast_api_app(
   ^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/google/adk/cli/fast_api.py", line 129, in get_fast_api_app
   artifact_service = create_artifact_service_from_options(
   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/google/adk/cli/utils/service_factory.py", line 130, in create_artifact_service_from_options
   return create_local_artifact_service(base_dir=base_path)
   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/myuser/.local/lib/python3.11/site-packages/google/adk/cli/utils/local_storage.py", line 106, in create_local_artifact_service
   artifact_root.mkdir(parents=True, exist_ok=True)
   File "/usr/local/lib/python3.11/pathlib.py", line 1120, in mkdir
   self.parent.mkdir(parents=True, exist_ok=True)
   File "/usr/local/lib/python3.11/pathlib.py", line 1116, in mkdir
   os.mkdir(self, mode)
   PermissionError: [Errno 13] Permission denied: '/app/agents/.adk'

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: [e.g. macOS, Linux, Windows]: Cloud RUN
• Python version(python -V): 3.13
• ADK version(pip show google-adk): 1.21

Model Information:

• Are you using LiteLLM: Yes/No NO
• Which model is being used(e.g. gemini-2.5-pro) gemini-2.5-pro

Additional context
Add any other context about the problem here.

[GWeale]

This is my current understanding it is failing because ADK is trying to create a new feature which is the .adk persistence directory under the agents root (/app/agents/.adk), but the Cloud Run container is running as a non‑root user and /app/agents isn’t writable in the generated image.

I will look into this more, but in the meantime,

you can deploy with a writable artifact backend, e.g. --artifact_service_uri=file:///tmp/adk_artifacts or --artifact_service_uri=memory:// (or gs://...), and similarly choose a session backend if needed.

Or adjust the generated Dockerfile to mkdir/chown a writable dir for .adk (or move .adk to /tmp).

[dcnadler]

I'm hitting the same error.

Using 1.20.0 in the meantime.