https://pulumi.com logo
Title
p

prehistoric-account-60014

03/04/2020, 4:54 PM
Anybody getting this error when attempting to create a cloud function?
Error waiting for Creating CloudFunctions Function: error while retrieving operation: googleapi: Error 403: Your application has authenticated using end user credentials from the Google Cloud SDK or Google Cloud Shell which are not supported by the <http://cloudfunctions.googleapis.com|cloudfunctions.googleapis.com>. We recommend configuring the billing/quota_project setting in gcloud or using a service account through the auth/impersonate_service_account setting. For more information about service accounts and how to use them in your application, see <https://cloud.google.com/docs/authentication/>., accessNotConfigured
The error doesn’t happen when using
gcloud
command line tool
t

tall-librarian-49374

03/04/2020, 7:08 PM
Yes, a bunch of people hit this earlier, you may find it with search, but I guess the solution was to use a service account
p

prehistoric-account-60014

03/04/2020, 10:59 PM
That would seem to be the obvious solution but I’ve had no luck with it (
gcloud auth activate-service-account
)
I’m having no trouble creating a cloud function using
gcloud
itself
Ok, it looks like it’s not enough to use
gcloud auth activate-service-account
but instead,
export GOOGLE_CREDENTIALS=$(cat key.json
for Pulumi to use SA credentials
w

white-balloon-205

03/05/2020, 2:46 AM
@tall-librarian-49374 worth updating your blog post to mention this?
t

tall-librarian-49374

03/05/2020, 7:43 AM
w

white-balloon-205

03/05/2020, 7:47 AM
Ahh - I misread this as being about Cloud Run - I though I recalled folks hitting the same error for that API. But if this is just a broad issue - perhaps we should instead update core Pulumi GCP docs to more strongly encourage service accounts?
t

tall-librarian-49374

03/05/2020, 8:13 AM
I actually don’t know how widespread it is… but I think I only saw messages about the Cloud Functions in this Slack.
p

prehistoric-account-60014

03/05/2020, 2:18 PM
Was this a recent change by GCP?
t

tall-librarian-49374

03/05/2020, 3:17 PM
Again I don’t know, I’ve always used service accounts