firebase / firebase-tools

The Firebase Command Line Tools
MIT License
4.01k stars 929 forks source link

allUsers > Cloud Functions Invoker role randomly added to newly deployed HTTP functions #3965

Closed feliksmatsko closed 2 years ago

feliksmatsko commented 2 years ago

Environment info

firebase-tools: 10.0.1 Platform: macOS

Test case

https://github.com/feliksmatsko/firebase-cli-issue

Steps to reproduce

  1. Create more than 40 normal http cloud functions (example)
  2. run cli: firebase deploy --only functions

Expected behavior

For ALL newly deployed cloud functions to have the same permissions

Actual behavior

Some functions allow authenticated and some don't. The number of functions with and without invoker created is random. Multiple errors in cli: "Error Failed to set invoker function f38 in region us-central1"

Screenshot 2021-12-20 at 15 20 16
bkendall commented 2 years ago

Do you have a log file for when this happens? That would help greatly in trying to debug this. I'm not sure off hand of an issue where this would only occasionally work but maybe there's something that can help shed light on it.

google-oss-bot commented 2 years ago

Hey @feliksmatsko. We need more information to resolve this issue but there hasn't been an update in 7 weekdays. I'm marking the issue as stale and if there are no new updates in the next 3 days I will close it automatically.

If you have more information that will help us get to the bottom of this, just add a comment!

google-oss-bot commented 2 years ago

Since there haven't been any recent updates here, I am going to close this issue.

@feliksmatsko if you're still experiencing this problem and want to continue the discussion just leave a comment here and we are happy to re-open this.

inlined commented 2 years ago

We can add more retries to this API call, but it tends to just be flaky. If you set invoker: 'public' in your functions we make sure this is set on every deploy.