Closed fergusfrl closed 3 years ago
Hey @fergusfrl, thanks for raising this issue. This has me a little stumped. A couple of suggestions:
Generate a new service account key in the console and store the path to the key in this env variable: GOOGLE_APPLICATION_CREDENTIALS
. This is used for the node admin SDK but I assume it's also used for the CLI.
Another one would be to logout and login (i.e firebase logout
& firebase login
on command line). It does sound like something may have failed silently during setup perhaps.
Thanks for getting back to me Russell - join the "stumped" crew 😁
I created a Service Account with the "Owner" role then I the GOOGLE_APPLICATION_CREDENTIALS
environment variable to point towards the associated JSON file for the Service Account. I then logged out and back in again.
Unfortunately when uninstalling an extension using the CLI I still get error:
RESOURCE_ERROR at /deployments/firebase-ext-firestore-translate-text/resources/mods-api-enable-cloudfunctions: {"ResourceType":"deploymentmanager.v2.virtual.enableService","ResourceErrorCode":"403","ResourceErrorMessage":{"code":403,"message":"The caller does not have permission","status":"PERMISSION_DENIED","statusMessage":"Forbidden","requestPath":"https://serviceusage.googleapis.com/v1/projects/akeela-development-291705/services/cloudfunctions.googleapis.com:enable","httpMethod":"POST"}}; RESOURCE_ERROR at /deployments/firebase-ext-firestore-translate-text/resources/mods-api-enable-firebase: {"ResourceType":"deploymentmanager.v2.virtual.enableService","ResourceErrorCode":"403","ResourceErrorMessage":{"code":403,"message":"The caller does not have permission","status":"PERMISSION_DENIED","statusMessage":"Forbidden","requestPath":"https://serviceusage.googleapis.com/v1/projects/akeela-development-291705/services/firebase.googleapis.com:enable","httpMethod":"POST"}}; RESOURCE_ERROR at /deployments/firebase-ext-firestore-translate-text/resources/mods-api-enable-iam: {"ResourceType":"deploymentmanager.v2.virtual.enableService","ResourceErrorCode":"403","ResourceErrorMessage":{"code":403,"message":"The caller does not have permission","status":"PERMISSION_DENIED","statusMessage":"Forbidden","requestPath":"https://serviceusage.googleapis.com/v1/projects/akeela-development-291705/services/iam.googleapis.com:enable","httpMethod":"POST"}}; RESOURCE_ERROR at /deployments/firebase-ext-firestore-translate-text/resources/mods-api-enable-cloudbuild: {"ResourceType":"deploymentmanager.v2.virtual.enableService","ResourceErrorCode":"403","ResourceErrorMessage":{"code":403,"message":"The caller does not have permission","status":"PERMISSION_DENIED","statusMessage":"Forbidden","requestPath":"https://serviceusage.googleapis.com/v1/projects/akeela-development-291705/services/cloudbuild.googleapis.com:enable","httpMethod":"POST"}}; RESOURCE_ERROR at /deployments/firebase-ext-firestore-translate-text/resources/mods-api-enable-translate: {"ResourceType":"deploymentmanager.v2.virtual.enableService","ResourceErrorCode":"403","ResourceErrorMessage":{"code":403,"message":"The caller does not have permission","status":"PERMISSION_DENIED","statusMessage":"Forbidden","requestPath":"https://serviceusage.googleapis.com/v1/projects/akeela-development-291705/services/translate.googleapis.com:enable","httpMethod":"POST"}}
Is there anything further I can try?
Yeah, it's really tough to debug this one. it could be something as trivial as not accepting an email after being invited to the project.
Here is the list of authentication methods used by the Firebase CLI tool in order of specificity. It might be worth having a play with that because it might be a sneaky credential being used that doesn't have permission.
Or you could save potentially a lot of fruitless debugging time, and create yourself as another owner? See if that works?
Hey Russell, quick update. I unfortunately wasn't able to get this working. To resolve this problem I created a new project which is working as expected. I'm satisfied and do not require any more help on this ticket.
It's up to you whether you want to close this off or investigate further.
Thanks for all your help 💯
Hey @fergusfrl, no problem, thanks for letting us know! I'm sorry it didn't work as expected but at least you have a working project now 😄
In my case Ideleted the service account
solved it by running
gcloud projects add-iam-policy-binding aefct-dba1e --member serviceAccount:<PROJECT_NUMBER>@cloudservices.gserviceaccount.com --role roles/editor
[REQUIRED] Step 2: Describe your configuration
storage-resize-images
,firestore-send-email
,delete-user-data
0.1.14
,0.1.5
,0.1.6
[REQUIRED] Step 3: Describe the problem
When installing/uninstalling firebase extensions I can see the following errors in my console:
As a part of troubleshooting I ran:
firebase ext:list --json --project=[projectId-or-alias] > result.json
, and received this file:This JSON suggests to me that I do not have the required permission to install/uninstall, however I am an owner of the project. I believe that through the docs this is the correct permission.
Finally, this seems to be project specific. I can successfully install/uninstall extensions as the saem user in other projects.
Steps to reproduce:
akeela-development-291705
Expected result
Actual result