the service account file was configured as Cloud Spanner Database User and it didn't work. /var/run/secret/cloud.google.com/service-account.json
I also tried giving the service account configured with owner access but that didn't work. Was there a way to allow the VM to access Spanner other than the config file?

The second error I am guessing is due to the first. Third I have no idea. Awesome demo. Thank you.

Output:

2017/07/25 07:48:54 spanner: code = "PermissionDenied", desc = "Access denied. Missing IAM permission: spanner.sessions.create."
2017/07/25 07:48:56 failed to upload 1 traces to the Cloud Trace server.
2017/07/25 07:50:54 transport: http2Client.notifyError got notified that the client transport was broken EOF.

EDIT: I kept trying and was wondering if it had to do with "custom IAM roles mapped to kubernetes roles" https://youtu.be/XL9CQobFB8I?t=1285