Accessing the Google Cloud Console and Cloud Shell Reviews

Task 1 step 5 says to click "Create bucket", however, the button says only "Create" Use the gcloud command line to create a second service account step 3-5 gcloud projects add-iam-policy-binding $GOOGLE_CLOUD_PROJECT --member serviceAccount:test-service-account2@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com --role roles/viewer Updated IAM policy for project [qwiklabs-gcp-02-87b3fa73d38b]. bindings: - members: - serviceAccount:qwiklabs-gcp-02-87b3fa73d38b@qwiklabs-gcp-02-87b3fa73d38b.iam.gserviceaccount.com role: roles/bigquery.admin - members: - serviceAccount:929922825976@cloudbuild.gserviceaccount.com role: roles/cloudbuild.builds.builder - members: - serviceAccount:service-929922825976@gcp-sa-cloudbuild.iam.gserviceaccount.com role: roles/cloudbuild.serviceAgent - members: - serviceAccount:service-929922825976@compute-system.iam.gserviceaccount.com role: roles/compute.serviceAgent - members: - serviceAccount:service-929922825976@container-engine-robot.iam.gserviceaccount.com role: roles/container.serviceAgent - members: - serviceAccount:929922825976-compute@developer.gserviceaccount.com - serviceAccount:929922825976@cloudservices.gserviceaccount.com - serviceAccount:test-service-account@qwiklabs-gcp-02-87b3fa73d38b.iam.gserviceaccount.com role: roles/editor - members: - serviceAccount:admiral@qwiklabs-services-prod.iam.gserviceaccount.com - serviceAccount:qwiklabs-gcp-02-87b3fa73d38b@qwiklabs-gcp-02-87b3fa73d38b.iam.gserviceaccount.com - user:student-04-a52db6ce1ed4@qwiklabs.net role: roles/owner - members: - serviceAccount:qwiklabs-gcp-02-87b3fa73d38b@qwiklabs-gcp-02-87b3fa73d38b.iam.gserviceaccount.com role: roles/storage.admin - members: - serviceAccount:test-service-account2@qwiklabs-gcp-02-87b3fa73d38b.iam.gserviceaccount.com - user:student-04-a52db6ce1ed4@qwiklabs.net role: roles/viewer etag: BwYLyPHv11g= version: 1 Did not add the role to the service account Authenticate as a service account step 9 error: student_04_a52db6ce1ed4@cloudshell:~ (qwiklabs-gcp-02-87b3fa73d38b)$ gsutil iam ch allUsers:objectViewer gs://$MY_BUCKET_NAME_1 ERROR 1205 20:29:55.726501 retry_decorator.py] Retrying in 0.94 seconds ... Traceback (most recent call last): File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/gcs_json_api.py", line 476, in SetBucketIamPolicy return self.api_client.buckets.SetIamPolicy(apitools_request, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/third_party/storage_apitools/storage_v1_client.py", line 466, in SetIamPolicy return self._RunMethod( ^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/base_api.py", line 737, in _RunMethod return self.ProcessHttpResponse(method_config, http_response, request) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/base_api.py", line 743, in ProcessHttpResponse self.__ProcessHttpResponse(method_config, http_response, request)) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/base_api.py", line 609, in __ProcessHttpResponse raise exceptions.HttpError.FromResponse( apitools.base.py.exceptions.HttpError: HttpError accessing <https://storage.googleapis.com/storage/v1/b/qwiklabs-gcp-02-87b3fa73d38b/iam?alt=json>: response: <{'x-guploader-uploadid': 'ABPtcPoTjdB6V_pMi_XF8wFba8VoV2XEb6ichl1PdybAunOBE5CEYurHlpMlaFEmFUQVrMVSf98', 'content-type': 'application/json; charset=UTF-8', 'date': 'Tue, 05 Dec 2023 20:29:55 GMT', 'vary': 'Origin, X-Origin', 'cache-control': 'no-cache, no-store, max-age=0, must-revalidate', 'expires': 'Mon, 01 Jan 1990 00:00:00 GMT', 'pragma': 'no-cache', 'content-length': '476', 'server': 'UploadServer', 'status': '412'}>, content <{ "error": { "code": 412, "message": "The member bindings allUsers and allAuthenticatedUsers are not allowed since public access prevention is enforced.", "errors": [ { "message": "The member bindings allUsers and allAuthenticatedUsers are not allowed since public access prevention is enforced.", "domain": "global", "reason": "conditionNotMet", "locationType": "header", "location": "If-Match" } ] } } > During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/retry-decorator/retry_decorator/retry_decorator.py", line 20, in f_retry return f(*args, **kwargs) ^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/commands/iam.py", line 701, in _PatchIamHelperInternal self._SetIamHelperInternal(storage_url, policy, thread_state=thread_state) File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/commands/iam.py", line 601, in _SetIamHelperInternal gsutil_api.SetBucketIamPolicy(storage_url.bucket_name, File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/cloud_api_delegator.py", line 234, in SetBucketIamPolicy return self._GetApi(provider).SetBucketIamPolicy(bucket_name, policy) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/gcs_json_api.py", line 479, in SetBucketIamPolicy self._TranslateExceptionAndRaise(e, bucket_name=bucket_name) File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/gcs_json_api.py", line 2260, in _TranslateExceptionAndRaise raise translated_exception gslib.cloud_api.PreconditionException: PreconditionException: 412 The member bindings allUsers and allAuthenticatedUsers are not allowed since public access prevention is enforced. ERROR 1205 20:29:56.926228 retry_decorator.py] Retrying in 1.98 seconds ... Traceback (most recent call last): File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/gcs_json_api.py", line 476, in SetBucketIamPolicy return self.api_client.buckets.SetIamPolicy(apitools_request, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/third_party/storage_apitools/storage_v1_client.py", line 466, in SetIamPolicy return self._RunMethod( ^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/base_api.py", line 737, in _RunMethod return self.ProcessHttpResponse(method_config, http_response, request) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/base_api.py", line 743, in ProcessHttpResponse self.__ProcessHttpResponse(method_config, http_response, request)) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/apitools/apitools/base/py/base_api.py", line 609, in __ProcessHttpResponse raise exceptions.HttpError.FromResponse( apitools.base.py.exceptions.HttpError: HttpError accessing <https://storage.googleapis.com/storage/v1/b/qwiklabs-gcp-02-87b3fa73d38b/iam?alt=json>: response: <{'x-guploader-uploadid': 'ABPtcPryvN-scBsf-PHwLOO7mk35L1PuZ7KflSz4ujvVD2WkFD87fk8yICSfIs8y2-3H7H4hMB0', 'content-type': 'application/json; charset=UTF-8', 'date': 'Tue, 05 Dec 2023 20:29:56 GMT', 'vary': 'Origin, X-Origin', 'cache-control': 'no-cache, no-store, max-age=0, must-revalidate', 'expires': 'Mon, 01 Jan 1990 00:00:00 GMT', 'pragma': 'no-cache', 'content-length': '476', 'server': 'UploadServer', 'status': '412'}>, content <{ "error": { "code": 412, "message": "The member bindings allUsers and allAuthenticatedUsers are not allowed since public access prevention is enforced.", "errors": [ { "message": "The member bindings allUsers and allAuthenticatedUsers are not allowed since public access prevention is enforced.", "domain": "global", "reason": "conditionNotMet", "locationType": "header", "location": "If-Match" } ] } } > During handling of the above exception, another exception occurred: Traceback (most recent call last): File "/usr/lib/google-cloud-sdk/platform/gsutil/third_party/retry-decorator/retry_decorator/retry_decorator.py", line 20, in f_retry return f(*args, **kwargs) ^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/commands/iam.py", line 701, in _PatchIamHelperInternal self._SetIamHelperInternal(storage_url, policy, thread_state=thread_state) File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/commands/iam.py", line 601, in _SetIamHelperInternal gsutil_api.SetBucketIamPolicy(storage_url.bucket_name, File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/cloud_api_delegator.py", line 234, in SetBucketIamPolicy return self._GetApi(provider).SetBucketIamPolicy(bucket_name, policy) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/gcs_json_api.py", line 479, in SetBucketIamPolicy self._TranslateExceptionAndRaise(e, bucket_name=bucket_name) File "/usr/lib/google-cloud-sdk/platform/gsutil/gslib/gcs_json_api.py", line 2260, in _TranslateExceptionAndRaise raise translated_exception gslib.cloud_api.PreconditionException: PreconditionException: 412 The member bindings allUsers and allAuthenticatedUsers are not allowed since public access prevention is enforced. PreconditionException: 412 The member bindings allUsers and allAuthenticatedUsers are not allowed since public access prevention is enforced. I was able to fix this by manually clicking on "Remove Public Access Prevention" in the console. There were similar errors the last time I took this lab.

Daniel M. · Reviewed neredeyse 3 yıl ago

Daniel M. · Reviewed neredeyse 3 yıl ago

Fue V. · Reviewed neredeyse 3 yıl ago

XopyIP G. · Reviewed neredeyse 3 yıl ago

Prasanna K. · Reviewed neredeyse 3 yıl ago

Yazhine Meera A S 2. · Reviewed neredeyse 3 yıl ago

Josue F. · Reviewed neredeyse 3 yıl ago

Marley B. · Reviewed neredeyse 3 yıl ago

Lukhona B. · Reviewed neredeyse 3 yıl ago

Xhemil M. · Reviewed neredeyse 3 yıl ago

Alexandre D. · Reviewed neredeyse 3 yıl ago

Elian R. · Reviewed neredeyse 3 yıl ago

Things not written clearly

Sanchit T. · Reviewed neredeyse 3 yıl ago

Gaurav W. · Reviewed neredeyse 3 yıl ago

karthikeyan n. · Reviewed neredeyse 3 yıl ago

Rateesh R. · Reviewed neredeyse 3 yıl ago

Alonso M. · Reviewed neredeyse 3 yıl ago

Gianmarco D. · Reviewed neredeyse 3 yıl ago

NAVASELVAM S S. · Reviewed neredeyse 3 yıl ago

Oliver B. · Reviewed neredeyse 3 yıl ago

not much time and auth permissions were messed up

Tiago C. · Reviewed neredeyse 3 yıl ago

Great copy/paste exercise!

Jonathan W. · Reviewed neredeyse 3 yıl ago

Denise G. · Reviewed neredeyse 3 yıl ago

There are some confusing commands

Paul R. · Reviewed neredeyse 3 yıl ago

Chan K. · Reviewed neredeyse 3 yıl ago