Difference between revisions of "Denied: Token exchange failed for project ... Caller does not have permission 'storage.buckets.get'"
Jump to navigation
Jump to search
(12 intermediate revisions by 2 users not shown) | |||
Line 1: | Line 1: | ||
denied: Token exchange failed for project 'your-project'. [[Caller does not have permission]] '[[storage.buckets.get]]'. To configure permissions, follow instructions at: https://cloud.google.com/container-registry/docs/access-control | denied: Token exchange failed for project 'your-project'. [[Caller does not have permission]] '[[storage.buckets.get]]'. To configure permissions, follow instructions at: https://cloud.google.com/container-registry/docs/access-control | ||
− | + | * [[Pull]] -> <code>[[roles/storage.objectViewer]]</code> | |
− | + | * [[Push]] -> <code>[[roles/storage.legacyBucketWriter]]</code> Grant the role on the registry storage bucket. This permission is only available at the bucket level, you cannot grant it at the project level. | |
+ | * Add registry hosts -> <code>[[roles/storage.admin]]</code> | ||
+ | === Permissions === | ||
+ | * <code>Bucket name: eu.artifacts.your-project[[.appspot.com]]</code> | ||
== Related == | == Related == | ||
* <code>[[docker push]]</code> | * <code>[[docker push]]</code> | ||
* [[Container registry]] | * [[Container registry]] | ||
+ | * [[Storage Admin]] | ||
== See also == | == See also == | ||
− | * {{ | + | * {{GCR}} |
* {{Container Registry}} | * {{Container Registry}} | ||
[[Category:Docker]] | [[Category:Docker]] |
Latest revision as of 10:09, 28 November 2022
denied: Token exchange failed for project 'your-project'. Caller does not have permission 'storage.buckets.get'. To configure permissions, follow instructions at: https://cloud.google.com/container-registry/docs/access-control
- Pull ->
roles/storage.objectViewer
- Push ->
roles/storage.legacyBucketWriter
Grant the role on the registry storage bucket. This permission is only available at the bucket level, you cannot grant it at the project level. - Add registry hosts ->
roles/storage.admin
Permissions[edit]
Bucket name: eu.artifacts.your-project.appspot.com
Related[edit]
See also[edit]
Advertising: