Skip to content

HTTP Error: 403, Permission 'firebasestorage.defaultBucket.get' denied #6593

Closed
@etienne-ditchlabs

Description

@etienne-ditchlabs

[REQUIRED] Environment info

firebase-tools: 13.0.0

Platform: Ubuntu

[REQUIRED] Test case

I've started getting the following error when deploying to Firebase with the latest version (13.0.0):

Unexpected error when fetching default storage bucket.


Error: HTTP Error: 403, Permission 'firebasestorage.defaultBucket.get' denied on resource '//firebasestorage.googleapis.com/projects/myProjectId/defaultBucket' (or it may not exist).

Reverting to 12.9.1 works fine.

[REQUIRED] Steps to reproduce

firebase deploy --project myProjectId

[REQUIRED] Expected behavior

Should deploy without any errors like it used to with the previous version.

[REQUIRED] Actual behavior

firebase deploy --project myProjectId --debug

[2023-12-07T18:59:32.491Z] > command requires scopes: ["email","openid","https://www.googleapis.com/auth/cloudplatformprojects.readonly","https://www.googleapis.com/auth/firebase","https://www.googleapis.com/auth/cloud-platform"]
[2023-12-07T18:59:32.567Z] [iam] checking project myProjectId for permissions ["cloudfunctions.functions.create","cloudfunctions.functions.delete","cloudfunctions.functions.get","cloudfunctions.functions.list","cloudfunctions.functions.update","cloudfunctions.operations.get","datastore.indexes.create","datastore.indexes.delete","datastore.indexes.list","datastore.indexes.update","firebase.projects.get","firebaserules.releases.create","firebaserules.releases.update","firebaserules.rulesets.create"]
[2023-12-07T18:59:32.568Z] >>> [apiv2][query] POST [https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions](https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions) [none]
[2023-12-07T18:59:32.568Z] >>> [apiv2][(partial)header] POST [https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions](https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions) x-goog-quota-user=projects/myProjectId
[2023-12-07T18:59:32.568Z] >>> [apiv2][body] POST [https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions](https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions) ***"permissions":["cloudfunctions.functions.create","cloudfunctions.functions.delete","cloudfunctions.functions.get","cloudfunctions.functions.list","cloudfunctions.functions.update","cloudfunctions.operations.get","datastore.indexes.create","datastore.indexes.delete","datastore.indexes.list","datastore.indexes.update","firebase.projects.get","firebaserules.releases.create","firebaserules.releases.update","firebaserules.rulesets.create"]***
[2023-12-07T18:59:32.572Z] <<< [apiv2][status] GET https://firebase-public.firebaseio.com/cli.json 200
[2023-12-07T18:59:32.572Z] <<< [apiv2][body] GET https://firebase-public.firebaseio.com/cli.json ***"cloudBuildErrorAfter":1594252800000,"cloudBuildWarnAfter":1590019200000,"defaultNode10After":1594252800000,"minVersion":"3.0.5","node8DeploysDisabledAfter":1613390400000,"node8RuntimeDisabledAfter":1615809600000,"node8WarnAfter":1600128000000***
[2023-12-07T18:59:32.657Z] <<< [apiv2][status] POST [https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions](https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions) 200
[2023-12-07T18:59:32.658Z] <<< [apiv2][body] POST [https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions](https://cloudresourcemanager.googleapis.com/v1/projects/myProjectId:testIamPermissions) ***"permissions":["cloudfunctions.functions.create","cloudfunctions.functions.delete","cloudfunctions.functions.get","cloudfunctions.functions.list","cloudfunctions.functions.update","cloudfunctions.operations.get","datastore.indexes.create","datastore.indexes.delete","datastore.indexes.list","datastore.indexes.update","firebase.projects.get","firebaserules.releases.create","firebaserules.releases.update","firebaserules.rulesets.create"]***
[2023-12-07T18:59:32.659Z] >>> [apiv2][query] POST [https://iam.googleapis.com/v1/projects/myProjectId/serviceAccounts/[email protected]:testIamPermissions](https://iam.googleapis.com/v1/projects/myProjectId/serviceAccounts/[email protected]:testIamPermissions) [none]
[2023-12-07T18:59:32.660Z] >>> [apiv2][body] POST [https://iam.googleapis.com/v1/projects/myProjectId/serviceAccounts/[email protected]:testIamPermissions](https://iam.googleapis.com/v1/projects/myProjectId/serviceAccounts/[email protected]:testIamPermissions) ***"permissions":["iam.serviceAccounts.actAs"]***
[2023-12-07T18:59:32.748Z] <<< [apiv2][status] POST [https://iam.googleapis.com/v1/projects/myProjectId/serviceAccounts/[email protected]:testIamPermissions](https://iam.googleapis.com/v1/projects/myProjectId/serviceAccounts/[email protected]:testIamPermissions) 200
[2023-12-07T18:59:32.748Z] <<< [apiv2][body] POST [https://iam.googleapis.com/v1/projects/myProjectId/serviceAccounts/[email protected]:testIamPermissions](https://iam.googleapis.com/v1/projects/myProjectId/serviceAccounts/[email protected]:testIamPermissions) ***"permissions":["iam.serviceAccounts.actAs"]***

=== Deploying to 'myProjectId'...

i  deploying storage, firestore, functions 
Running command: npm --prefix "$RESOURCE_DIR" run lint

> lint
> eslint --ext .js,.ts .

Running command: npm --prefix "$RESOURCE_DIR" run build

> build
> rm -rf ./lib && tsc --project tsconfig.build.json

✔  functions: Finished running predeploy script. 
i  storage: ensuring required API firebasestorage.googleapis.com is enabled... 
[2023-12-07T18:59:50.326Z] >>> [apiv2][query] GET [https://serviceusage.googleapis.com/v1/projects/myProjectId/services/firebasestorage.googleapis.com](https://serviceusage.googleapis.com/v1/projects/myProjectId/services/firebasestorage.googleapis.com) [none]
[2023-12-07T18:59:50.326Z] >>> [apiv2][(partial)header] GET [https://serviceusage.googleapis.com/v1/projects/myProjectId/services/firebasestorage.googleapis.com](https://serviceusage.googleapis.com/v1/projects/myProjectId/services/firebasestorage.googleapis.com) x-goog-quota-user=projects/myProjectId
[2023-12-07T18:59:50.600Z] <<< [apiv2][status] GET [https://serviceusage.googleapis.com/v1/projects/myProjectId/services/firebasestorage.googleapis.com](https://serviceusage.googleapis.com/v1/projects/myProjectId/services/firebasestorage.googleapis.com) 200
[2023-12-07T18:59:50.601Z] <<< [apiv2][body] GET [https://serviceusage.googleapis.com/v1/projects/myProjectId/services/firebasestorage.googleapis.com](https://serviceusage.googleapis.com/v1/projects/myProjectId/services/firebasestorage.googleapis.com) [omitted]
✔  storage: required API firebasestorage.googleapis.com is enabled 
[2023-12-07T18:59:50.602Z] >>> [apiv2][query] GET [https://firebasestorage.googleapis.com/v1alpha/projects/myProjectId/defaultBucket](https://firebasestorage.googleapis.com/v1alpha/projects/myProjectId/defaultBucket) [none]
[2023-12-07T18:59:50.750Z] <<< [apiv2][status] GET [https://firebasestorage.googleapis.com/v1alpha/projects/myProjectId/defaultBucket](https://firebasestorage.googleapis.com/v1alpha/projects/myProjectId/defaultBucket) 403
[2023-12-07T18:59:50.750Z] <<< [apiv2][body] GET [https://firebasestorage.googleapis.com/v1alpha/projects/myProjectId/defaultBucket](https://firebasestorage.googleapis.com/v1alpha/projects/myProjectId/defaultBucket) ***"error":***"code":403,"message":"Permission 'firebasestorage.defaultBucket.get' denied on resource '//firebasestorage.googleapis.com/projects/myProjectId/defaultBucket' (or it may not exist).","status":"PERMISSION_DENIED","details":[***"@type":"type.googleapis.com/google.rpc.ErrorInfo","reason":"IAM_PERMISSION_DENIED","domain":"firebasestorage.googleapis.com","metadata":***"resource":"projects/myProjectId/defaultBucket","permission":"firebasestorage.defaultBucket.get"***]***


Unexpected error when fetching default storage bucket.


Error: HTTP Error: 403, Permission 'firebasestorage.defaultBucket.get' denied on resource '//firebasestorage.googleapis.com/projects/myProjectId/defaultBucket' (or it may not exist).
[2023-12-07T18:59:50.752Z] Error Context: ***
  "body": ***
    "error": ***
      "code": 403,
      "message": "Permission 'firebasestorage.defaultBucket.get' denied on resource '//firebasestorage.googleapis.com/projects/myProjectId/defaultBucket' (or it may not exist).",
      "status": "PERMISSION_DENIED",
      "details": [
        ***
          "@type": "type.googleapis.com/google.rpc.ErrorInfo",
          "reason": "IAM_PERMISSION_DENIED",
          "domain": "firebasestorage.googleapis.com",
          "metadata": ***
            "resource": "projects/myProjectId/defaultBucket",
            "permission": "firebasestorage.defaultBucket.get"
          ***
        ***
      ]
    ***
  ***,
  "response": ***
    "statusCode": 403
  ***
***
Error: Process completed with exit code 1.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions