When using the project owner, calling gcloud endpoints services describe returns the following:

generation: '10'
producerProjectId: wildfire-app-backend
serviceConfig:
  documentation: {}
  id: 2019-11-04r0
  legacy:
    apiV1Name: bifold.endpoints.wildfire-app-backend.cloud.goog
    devconsole:
      consoleApi: NEW
  migration: {}
  name: bifold.endpoints.wildfire-app-backend.cloud.goog
  title: Bifold gRPC API
  usage: {}

but when I use a service account that should have most permissions but fails to fetch the service config in a esp container in a private GKE cluster, I get:

producerProjectId: wildfire-app-backend
serviceName: bifold.endpoints.wildfire-app-backend.cloud.goog

I am wondering what is causing the discrepancy in the 2 results.

EDIT: My service account permissions are:

Cloud SQL Client
Editor
Role Viewer
Logs Writer
Monitoring Metric Writer
Owner
Service Management Administrator
Service Config Editor
Service Controller
Storage Admin
Storage Object Viewer

and my personal are:

App Engine Admin
App Engine Code Viewer
App Engine Deployer
App Engine Service Admin
Project Billing Manager
Cloud Build Service Account
Cloud Build Editor
Cloud Build Viewer
Compute OS Admin Login
Service Account User
Owner
Organization Administrator
Project Mover
Storage Admin