Permission denied when deploying a service

[Dale Bruce Hopkins]

I'm getting a 403 when attempting to deploy a new service.  I get the following error:

$ gcloud beta service-management deploy ./pb/out.pb ./endpoints/prod/review-gen.yml
ERROR: (gcloud.beta.service-management.deploy) You do not have permission to access service [review-gen-api.vendasta-internal.com] (or it may not exist): Service 'review-gen-api.vendasta-internal.com' not found or permission denied.

I have this exact same command succeeding with my demo environment (same proto and endpoints yaml except for the address differs).  Any ideas?

 -Dale

[Brad Friedman]

If you run `gcloud service-management list --produced`, do you see review-gen-api.vendasta-internal.com in the output?

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsubscri...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/CALR5AVYORKsZwMpUfzw4hkoaRKmMUZAq-dDaubR-1p91Gh9g%2Bg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Dale Bruce Hopkins]

No.

On Fri, Apr 7, 2017 at 10:57 AM Brad Friedman <frie...@google.com> wrote:

If you run `gcloud service-management list --produced`, do you see review-gen-api.vendasta-internal.com in the output?

On Fri, Apr 7, 2017 at 9:28 AM, Dale Bruce Hopkins <dhop...@vendasta.com> wrote:

I'm getting a 403 when attempting to deploy a new service.  I get the following error:

$ gcloud beta service-management deploy ./pb/out.pb ./endpoints/prod/review-gen.yml
ERROR: (gcloud.beta.service-management.deploy) You do not have permission to access service [review-gen-api.vendasta-internal.com] (or it may not exist): Service 'review-gen-api.vendasta-internal.com' not found or permission denied.

I have this exact same command succeeding with my demo environment (same proto and endpoints yaml except for the address differs).  Any ideas?

 -Dale

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endp...@googlegroups.com.

[Brad Friedman]

Are you running gcloud with the same account credentials as in your demo environment? You can check this by running `gcloud config list` and looking at the account field.

Are you in the correct project? That can be verified with the same command, under the project field.

On Fri, Apr 7, 2017 at 10:00 AM, Dale Bruce Hopkins <dhop...@vendasta.com> wrote:

No.

On Fri, Apr 7, 2017 at 10:57 AM Brad Friedman <frie...@google.com> wrote:

If you run `gcloud service-management list --produced`, do you see review-gen-api.vendasta-internal.com in the output?

On Fri, Apr 7, 2017 at 9:28 AM, Dale Bruce Hopkins <dhop...@vendasta.com> wrote:

I'm getting a 403 when attempting to deploy a new service.  I get the following error:

$ gcloud beta service-management deploy ./pb/out.pb ./endpoints/prod/review-gen.yml
ERROR: (gcloud.beta.service-management.deploy) You do not have permission to access service [review-gen-api.vendasta-internal.com] (or it may not exist): Service 'review-gen-api.vendasta-internal.com' not found or permission denied.

I have this exact same command succeeding with my demo environment (same proto and endpoints yaml except for the address differs).  Any ideas?

 -Dale

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsub...@googlegroups.com.

[Dale Bruce Hopkins]

Same credentials, same project for deployments that work and this one.   I added the --project option to make sure:

gcloud beta service-management deploy ./pb/out.pb ./endpoints/prod/review-gen.yml --project=repcore-prod

On Fri, Apr 7, 2017 at 11:09 AM Brad Friedman <frie...@google.com> wrote:

Are you running gcloud with the same account credentials as in your demo environment? You can check this by running `gcloud config list` and looking at the account field.

Are you in the correct project? That can be verified with the same command, under the project field.

On Fri, Apr 7, 2017 at 10:00 AM, Dale Bruce Hopkins <dhop...@vendasta.com> wrote:

No.

On Fri, Apr 7, 2017 at 10:57 AM Brad Friedman <frie...@google.com> wrote:

If you run `gcloud service-management list --produced`, do you see review-gen-api.vendasta-internal.com in the output?

On Fri, Apr 7, 2017 at 9:28 AM, Dale Bruce Hopkins <dhop...@vendasta.com> wrote:

I'm getting a 403 when attempting to deploy a new service.  I get the following error:

$ gcloud beta service-management deploy ./pb/out.pb ./endpoints/prod/review-gen.yml
ERROR: (gcloud.beta.service-management.deploy) You do not have permission to access service [review-gen-api.vendasta-internal.com] (or it may not exist): Service 'review-gen-api.vendasta-internal.com' not found or permission denied.

I have this exact same command succeeding with my demo environment (same proto and endpoints yaml except for the address differs).  Any ideas?

 -Dale

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endp...@googlegroups.com.

[Dale Bruce Hopkins]

Not sure what I was running into, but running the same command just now actually worked :/  Must have been something transient.

[guysh...@gmail.com]

I'm experiencing a very similar problem while trying to get the endpoints quickstart to work. I've tried the quickstart instructions for both Container Engine and for App Engine Flexible:

    https://cloud.google.com/endpoints/docs/quickstart-container-engine

    https://cloud.google.com/endpoints/docs/quickstart-app-engine

Billing is enabled for my project, and I've verified the endpoints and service management APIs are enabled.

I've successfully authenticated as the project owner using: gcloud auth login. And I've successfully setup ADC using: gcloud auth application-default login.

Per the quickstart instructions, I'm using the openapi.yaml in a locally cloned repo from here:

https://github.com/GoogleCloudPlatform/java-docs-samples/blob/master/endpoints/getting-started/openapi.yaml

I've replaced YOUR-PROJECT-ID with my project id (that I'm logged in as owner of).

Then the deploy command fails:

    gcloud service-management deploy openapi.yaml

This is the error message:

    ERROR: (gcloud.service-management.deploy) You do not have permission to access service [echo-api.endpoints.foobar-dev-project.cloud.goog] (or it may not exist): Service 'echo-api.endpoints.foobar-dev-project.cloud.goog' not found or permission denied.

The OP reported his similar error was transient, but I've retried the quickstart instructions twice, almost a day between attempts, and I've attempted the deploy command several times.

I'm using Google Cloud SDK version 150.0.0.

Any suggestions on what's going wrong for me?

[Zdenko Hrcek]

I have exactly the same issue (although I'm trying to run Python echo example on GAE Standard) https://github.com/GoogleCloudPlatform/python-docs-samples/tree/master/appengine/standard/endpoints-frameworks-v2/echo

I tried to deploy it on 2 projects, using gcloud version 149 and 150 but still the same error:

ERROR: (gcloud.service-management.deploy) You do not have permission to access service etc.

Zdenko

[yutak...@gmail.com]

I'm having the same issue trying to deploy the endpoint quickstarts in Python and Go.

https://cloud.google.com/endpoints/docs/frameworks/python/quickstart-frameworks-python

My project looks like is enabled to use the endpoints API.

----------------------

DEBUG: Service [endpoints.googleapis.com] is already enabled for project [my-foo-bar]

=======================

==== request start ====

uri: https://servicemanagement.googleapis.com/v1/services/echo-api.endpoints.my-foo-bar.appspot.com?alt=json

method: GET

== headers start ==

Authorization: Bearer <some value>

accept: application/json

accept-encoding: gzip, deflate

content-length: 0

user-agent: google-cloud-sdk <blah_blah> gcloud/150.0.0 command/gcloud.service-management.deploy invocation-id/<ID> environment/None environment-version/None interactive/True python/2.7.10 (Windows NT 6.2.9200)

== headers end ==

== body start ==

== body end ==

==== request end ====

---- response start ----

-- headers start --

-content-encoding: gzip

alt-svc: quic=":443"; ma=2592000; v="37,36,35"

cache-control: private

content-length: 181

content-type: application/json; charset=UTF-8

date: Sun, 09 Apr 2017 01:54:15 GMT

server: ESF

status: 403

transfer-encoding: chunked

vary: Origin, X-Origin, Referer

x-content-type-options: nosniff

x-frame-options: SAMEORIGIN

x-xss-protection: 1; mode=block

-- headers end --

-- body start --

{

  "error": {

    "code": 403,

    "message": "Service 'echo-api.endpoints.my-foo-bar.appspot.com' not found or permission denied.",

    "status": "PERMISSION_DENIED"

  }

}

-- body end --

total round trip time (request+response): 0.432 secs

---- response end ----

[Sepehr Ebrahimzadeh]

Hi Yukata, unfortunately we have a documentation bug on that page.

The Endpoints service name should be in this format:

*.endpoints.<project-id>.cloud.goog

and not *.endpoints.<project-id>.appspot.com

Would you please try that and let me know if you're still seeing the 403 issue?

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsub...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/0fefcbb3-510b-41d9-a39d-9f377f20c8c5%40googlegroups.com.

[pe...@getople.com]

I'm having same issues on java quickstart as well. 

https://cloud.google.com/endpoints/docs/frameworks/java/quickstart-frameworks-java

I'm using gcloud console.

~/java-docs-samples/appengine/endpoints-frameworks-v2/backend$ gcloud service-management deploy openapi.jsonERROR: (gcloud.service-management.deploy) You do not have permission to access service [echo-api.endpoints.endpoints-v2-test-164121.cloud.goog] (or it may not exist): Service 'echo-api.endpoints.endpoints-v2-test-164121.cloud.goog' not found or permission denied.

Also, tried https://cloud.google.com/endpoints/docs/quickstart-app-engine

python-docs-samples/endpoints/getting-started

The url in this example seems to be correct. 

host: "echo-api.endpoints.YOUR-PROJECT-ID.cloud.goog"

But I ran into same exact issue after executing 

gcloud service-management deploy openapi.yaml

For the https://cloud.google.com/endpoints/docs/frameworks/python/quickstart-frameworks-python

I can't even get to deployment point it fails during generation of openAPI configuration file due to this:

:~/python-docs-samples/appengine/standard/endpoints-frameworks-v2/echo$ python lib/endpoints/endpointscfg.py get_openapi_spec main.EchoApi --hostname echo-api.endpoints.endpoints-v2-test-164121.cloud.googTraceback (most recent call last): File "lib/endpoints/endpointscfg.py", line 633, in <module> main(sys.argv) File "lib/endpoints/endpointscfg.py", line 629, in main args.callback(args) File "lib/endpoints/endpointscfg.py", line 487, in _GenOpenApiSpecCallback application_path=args.application)

ImportError: No module named control 

[Sepehr Ebrahimzadeh]

Hi Petr,

Yes we have a server side issue and our production engineers are working on fixing it. Sorry for the inconvenience.

Please stay tuned.

Thanks

Sepehr

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsubscri...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/0fefcbb3-510b-41d9-a39d-9f377f20c8c5%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/30e81b59-811b-4259-8757-f1c3d3773676%40googlegroups.com.

[pe...@getople.com]

Thank you for clarification. 

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/0fefcbb3-510b-41d9-a39d-9f377f20c8c5%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Sepehr Ebrahimzadeh]

Update: the server side issue has been resolved, and you should no longer be seeing 403 permission denied errors from the "gcloud service-management deploy" command.

Thanks for your patience.

Sepehr

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsubscri...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/0fefcbb3-510b-41d9-a39d-9f377f20c8c5%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsubscri...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/30e81b59-811b-4259-8757-f1c3d3773676%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/721b9263-687d-4ea6-9db3-e437e0a503d8%40googlegroups.com.

[Zdenko Hrcek]

Thanks,

it works for me now.

Zdenko

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/0fefcbb3-510b-41d9-a39d-9f377f20c8c5%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsub...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/30e81b59-811b-4259-8757-f1c3d3773676%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[wide...@gmail.com]

I've been trying to deploy an app using "gcloud app deploy app.yaml" but keep getting this:

     ERROR: (gcloud.app.deploy) Permission denied

     Please verify that you have execute permission for allfiles in your CLOUD SDK bin folder

Please help!

[D. T.]

Have you done what the error message said? What operating system are you on?

--

You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-endpoints/5323e2b5-fef8-49e9-bfe2-9894a23300ca%40googlegroups.com.

[antoni...@drafteam.com.br]

Im getting the same error:

ERROR: (gcloud.service-management.deploy) You do not have permission to access service [echo-api.endpoints.dft-core-dev.cloud.goog] (or it may not exist): Service 'echo-api.endpoints.dft-core-dev.cloud.goog' not found or permission denied.

Any help please?

Em segunda-feira, 26 de junho de 2017 16:08:20 UTC-3, Daniel Tang escreveu:

Have you done what the error message said? What operating system are you on?

On Thu, Jun 22, 2017 at 7:11 PM <wide...@gmail.com> wrote:

I've been trying to deploy an app using "gcloud app deploy app.yaml" but keep getting this:

     ERROR: (gcloud.app.deploy) Permission denied

     Please verify that you have execute permission for allfiles in your CLOUD SDK bin folder

Please help!

On Friday, April 7, 2017 at 9:28:24 AM UTC-7, Dale Bruce Hopkins wrote:

I'm getting a 403 when attempting to deploy a new service.  I get the following error:

$ gcloud beta service-management deploy ./pb/out.pb ./endpoints/prod/review-gen.yml
ERROR: (gcloud.beta.service-management.deploy) You do not have permission to access service [review-gen-api.vendasta-internal.com] (or it may not exist): Service 'review-gen-api.vendasta-internal.com' not found or permission denied.

I have this exact same command succeeding with my demo environment (same proto and endpoints yaml except for the address differs).  Any ideas?

 -Dale

--
You received this message because you are subscribed to the Google Groups "Google Cloud Endpoints" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-endpoints+unsub...@googlegroups.com.