google-cloud-iam

Unable to assign iam.serviceAccounts.signBlob permission

隐身守侯 提交于 2021-01-21 07:10:21
问题 TLDR; I'm having trouble assigning an IAM permission to a service account. I'm building a test that involves minting custom tokens with firebase Auth. When I hit: const token = await admin.auth().createCustomToken('test', { isAdmin: true, }) the following error is thrown Permission iam.serviceAccounts.signBlob is required to perform this operation on service account projects/-/serviceAccounts/dashboard@appspot.gserviceaccount.com.; Please refer to https://firebase.google.com/docs/auth/admin

Unable to assign iam.serviceAccounts.signBlob permission

落花浮王杯 提交于 2021-01-21 07:10:19
问题 TLDR; I'm having trouble assigning an IAM permission to a service account. I'm building a test that involves minting custom tokens with firebase Auth. When I hit: const token = await admin.auth().createCustomToken('test', { isAdmin: true, }) the following error is thrown Permission iam.serviceAccounts.signBlob is required to perform this operation on service account projects/-/serviceAccounts/dashboard@appspot.gserviceaccount.com.; Please refer to https://firebase.google.com/docs/auth/admin

The caller does not have permission when attempting to use Google Cloud Storage within Cloud Run

强颜欢笑 提交于 2021-01-05 12:57:43
问题 I'm attempting to get a Node project setup on Google Cloud Run with Cloud Storage. I am running into an authentication issue when using a created Service Account. When creating the service account I did successfully download the JSON token and got everything running correctly in my local development environment. The issue is when I have the application deployed successfully to Cloud Run I get the following error: Error: The caller does not have permission This occurs when I am attempting to

The caller does not have permission when attempting to use Google Cloud Storage within Cloud Run

a 夏天 提交于 2021-01-05 12:57:13
问题 I'm attempting to get a Node project setup on Google Cloud Run with Cloud Storage. I am running into an authentication issue when using a created Service Account. When creating the service account I did successfully download the JSON token and got everything running correctly in my local development environment. The issue is when I have the application deployed successfully to Cloud Run I get the following error: Error: The caller does not have permission This occurs when I am attempting to

Facing challenge to invoke cloud Function from cloud task using oidcToken

て烟熏妆下的殇ゞ 提交于 2020-12-15 01:38:42
问题 I am facing challenge to invoke cloud Function from cloud task using oidcToken . Here are details of my IAM & Code: const { CloudTasksClient } = require('@google-cloud/tasks'); const client = new CloudTasksClient(); //See https://cloud.google.com/tasks/docs/tutorial-gcf module.exports = async (payload, scheduleTimeInSec) => { const project = process.env.GOOGLE_APPLICATION_PROJECTID; const queue = process.env.QUEUE_NAME; const location = process.env.QUEUE_LOCATION; const callBackUrl = https:/

Facing challenge to invoke cloud Function from cloud task using oidcToken

青春壹個敷衍的年華 提交于 2020-12-15 01:37:09
问题 I am facing challenge to invoke cloud Function from cloud task using oidcToken . Here are details of my IAM & Code: const { CloudTasksClient } = require('@google-cloud/tasks'); const client = new CloudTasksClient(); //See https://cloud.google.com/tasks/docs/tutorial-gcf module.exports = async (payload, scheduleTimeInSec) => { const project = process.env.GOOGLE_APPLICATION_PROJECTID; const queue = process.env.QUEUE_NAME; const location = process.env.QUEUE_LOCATION; const callBackUrl = https:/

How do you enable “iam.serviceAccounts.actAs” permissions on a sevice account?

六月ゝ 毕业季﹏ 提交于 2020-12-01 10:58:09
问题 I am trying to deploy a service with a non-default service account by following this guide and it says I need "the iam.serviceAccounts.actAs permission on the service account being deployed". The service account I am using is @cloudbuild.gserviceaccount.com , but I don't see the option to add it on my project's Permissions page. 回答1: The key point is that the service account is a resource. You need to add an IAM role for your identity to the service account (the resource). This grants you

gcloud - ERROR: (gcloud.app.deploy) Permissions error fetching application

試著忘記壹切 提交于 2020-11-30 12:03:12
问题 I am trying to deploy node js app on google cloud but getting following error - Step #1: ERROR: (gcloud.app.deploy) Permissions error fetching application [apps /mytest-240512]. Please make sure you are using the correct project ID and that you have permission to view applications on the project. I am running following command - gcloud builds submit . --config cloudbuild.yaml My cloudbuild.yaml file looks like - steps: #install - name: 'gcr.io/cloud-builders/npm' args: ['install'] #deploy -

gcloud - ERROR: (gcloud.app.deploy) Permissions error fetching application

蓝咒 提交于 2020-11-30 12:01:07
问题 I am trying to deploy node js app on google cloud but getting following error - Step #1: ERROR: (gcloud.app.deploy) Permissions error fetching application [apps /mytest-240512]. Please make sure you are using the correct project ID and that you have permission to view applications on the project. I am running following command - gcloud builds submit . --config cloudbuild.yaml My cloudbuild.yaml file looks like - steps: #install - name: 'gcr.io/cloud-builders/npm' args: ['install'] #deploy -

gcloud - ERROR: (gcloud.app.deploy) Permissions error fetching application

荒凉一梦 提交于 2020-11-30 12:00:06
问题 I am trying to deploy node js app on google cloud but getting following error - Step #1: ERROR: (gcloud.app.deploy) Permissions error fetching application [apps /mytest-240512]. Please make sure you are using the correct project ID and that you have permission to view applications on the project. I am running following command - gcloud builds submit . --config cloudbuild.yaml My cloudbuild.yaml file looks like - steps: #install - name: 'gcr.io/cloud-builders/npm' args: ['install'] #deploy -