Difference between revisions of "Denied: Token exchange failed for project ... Caller does not have permission 'storage.buckets.get'"
Jump to navigation
Jump to search
| (13 intermediate revisions by 2 users not shown) | |||
| Line 1: | Line 1: | ||
denied: Token exchange failed for project 'your-project'. [[Caller does not have permission]] '[[storage.buckets.get]]'. To configure permissions, follow instructions at: https://cloud.google.com/container-registry/docs/access-control | denied: Token exchange failed for project 'your-project'. [[Caller does not have permission]] '[[storage.buckets.get]]'. To configure permissions, follow instructions at: https://cloud.google.com/container-registry/docs/access-control | ||
| − | + | * [[Pull]] -> <code>[[roles/storage.objectViewer]]</code> | |
| − | + | * [[Push]] -> <code>[[roles/storage.legacyBucketWriter]]</code> Grant the role on the registry storage bucket. This permission is only available at the bucket level, you cannot grant it at the project level. | |
| + | * Add registry hosts -> <code>[[roles/storage.admin]]</code> | ||
| + | === Permissions === | ||
| + | * <code>Bucket name: eu.artifacts.your-project[[.appspot.com]]</code> | ||
== Related == | == Related == | ||
* <code>[[docker push]]</code> | * <code>[[docker push]]</code> | ||
* [[Container registry]] | * [[Container registry]] | ||
| + | * [[Storage Admin]] | ||
== See also == | == See also == | ||
| + | * {{GCR}} | ||
* {{Container Registry}} | * {{Container Registry}} | ||
| − | + | ||
[[Category:Docker]] | [[Category:Docker]] | ||
Latest revision as of 10:09, 28 November 2022
denied: Token exchange failed for project 'your-project'. Caller does not have permission 'storage.buckets.get'. To configure permissions, follow instructions at: https://cloud.google.com/container-registry/docs/access-control
- Pull ->
roles/storage.objectViewer - Push ->
roles/storage.legacyBucketWriterGrant the role on the registry storage bucket. This permission is only available at the bucket level, you cannot grant it at the project level. - Add registry hosts ->
roles/storage.admin
Permissions[edit]
Bucket name: eu.artifacts.your-project.appspot.com
Related[edit]
See also[edit]
Advertising:
