Problem Creating a New Terra Billing Project
When I try to create a Terra Billing Project a red circle with a white i appears next to the name and when I click on it it says:
project my-billing-account creation finished with errors: {"ResourceType":"cloudresourcemanager.v1.project","ResourceErrorCode":"403","ResourceErrorMessage":{"code":403,"message":"The caller does not have permission","status":"PERMISSION_DENIED","statusMessage":"Forbidden","requestPath":"https://cloudresourcemanager.googleapis.com/v1/projects/my-billing-account","httpMethod":"GET"}} - code RESOURCE_ERROR
I noticed on my Google billing account when I add terra-billing@terra.bio as a Billing Account User it appears as terra-billing@
Comments
9 comments
Hi Lleonard,
There should be no issues with terra-billing@terra.bio appearing as terra-billing@firecloud.org in your Google billing project. This error often occurs because the name you chose for the terra billing project is the same as a Google project that already exists. The name needs to be unique so that Terra can create a project of the same name on your behalf. Do you know if the name you tried to use is the same as one that already exists?
Kind regards,
Jason
No, there's no project with the same name. I also tried 3 different names.
Hi Lleonard,
It can sometimes be hard to say definitively whether there is another project with the same name, as it applies to all of Google. On occasion, a name someone wishes to use for their billing project is already used by someone else somewhere in the world for their Google project. For instance, I see that in your original error you tried creating a billing project with the name my-billing-account, which has a high probability of being taken. Would you mind trying something a little more specific to you or your group, and perhaps add "-terra" to the end of it?
If you are still finding issues creating groups, please share with me the names you have tried and we can see if there is any other reason this could be happening.
Kind regards,
Jason
You're right it's fixed now, thanks.
Hi Lleonard,
Glad to hear! If we can assist with anything else, please let us know.
Kind regards,
Jason
Lleonard and Jason,
Thanks for reporting and explaining this error. I am also seeing this, and it's likely because of name collision.
Something to consider: Intercepting this error, and adding some text about how this error is likely caused by a name-space collision and how to address it.
Thanks,
Dave C
Hi Dave Clements,
Thanks for the suggestion! I have created a ticket for our product team to take a look at.
Best,
Samantha
I had the same issue, adding my error log here for better visibility:
code: 403 message: pet-iam.gserviceaccount.com does not have storage.buckets.get access to the Google Cloud Storage bucket. reason: forbidden location: null retryable: false com.google.cloud.storage.StorageException: pet-iam.gserviceaccount.com does not have storage.buckets.get access to the Google Cloud Storage bucket. at com.google.cloud.storage.spi.v1.HttpStorageRpc.translate(HttpStorageRpc.java:227) at com.google.cloud.storage.spi.v1.HttpStorageRpc.get(HttpStorageRpc.java:404) at com.google.cloud.storage.StorageImpl$4.call(StorageImpl.java:212) at com.google.cloud.storage.StorageImpl$4.call(StorageImpl.java:209) at shaded.cloud_nio.com.google.api.gax.retrying.DirectRetryingExecutor.submit(DirectRetryingExecutor.java:105) at com.google.cloud.RetryHelper.run(RetryHelper.java:76) at com.google.cloud.RetryHelper.runWithRetries(RetryHelper.java:50) at com.google.cloud.storage.StorageImpl.get(StorageImpl.java:208) at com.google.cloud.storage.contrib.nio.CloudStorageFileSystemProvider.requesterPays(CloudStorageFileSystemProvider.java:914) at com.google.cloud.storage.contrib.nio.CloudStorageFileSystem.<init>(CloudStorageFileSystem.java:187) at com.google.cloud.storage.contrib.nio.CloudStorageFileSystem.forBucket(CloudStorageFileSystem.java:148) at com.google.cloud.storage.contrib.nio.CloudStorageFileSystem.forBucket(CloudStorageFileSystem.java:134) at org.broadinstitute.hellbender.utils.gcs.BucketUtils.getPathOnGcs(BucketUtils.java:366) at org.broadinstitute.hellbender.utils.io.IOUtils.getPath(IOUtils.java:789) at org.broadinstitute.hellbender.cmdline.argumentcollections.ReferenceInputArgumentCollection.getReferencePath(ReferenceInputArgumentCollection.java:24) at org.broadinstitute.hellbender.engine.GATKTool.initializeReference(GATKTool.java:423) at org.broadinstitute.hellbender.engine.GATKTool.onStartup(GATKTool.java:693) at org.broadinstitute.hellbender.cmdline.CommandLineProgram.runTool(CommandLineProgram.java:137) at org.broadinstitute.hellbender.cmdline.CommandLineProgram.instanceMainPostParseArgs(CommandLineProgram.java:191) at org.broadinstitute.hellbender.cmdline.CommandLineProgram.instanceMain(CommandLineProgram.java:210) at org.broadinstitute.hellbender.Main.runCommandLineProgram(Main.java:162) at org.broadinstitute.hellbender.Main.mainEntry(Main.java:205) at org.broadinstitute.hellbender.Main.main(Main.java:291) Caused by: shaded.cloud_nio.com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 Forbidden { "code" : 403, "errors" : [ { "domain" : "global", "message" : "pet-gcp.iam.gserviceaccount.com does not have storage.buckets.get access to the Google Cloud Storage bucket.", "reason" : "forbidden" } ], "message" : "pet-gcp.iam.gserviceaccount.com does not have storage.buckets.get access to the Google Cloud Storage bucket." } at shaded.cloud_nio.com.google.api.client.googleapis.json.GoogleJsonResponseException.from(GoogleJsonResponseException.java:150) at shaded.cloud_nio.com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:113) at shaded.cloud_nio.com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:40) at shaded.cloud_nio.com.google.api.client.googleapis.services.AbstractGoogleClientRequest$1.interceptResponse(AbstractGoogleClientRequest.java:401) at shaded.cloud_nio.com.google.api.client.http.HttpRequest.execute(HttpRequest.java:1132) at shaded.cloud_nio.com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:499) at shaded.cloud_nio.com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:432) at shaded.cloud_nio.com.google.api.client.googleapis.services.AbstractGoogleClientRequest.execute(AbstractGoogleClientRequest.java:549) at com.google.cloud.storage.spi.v1.HttpStorageRpc.get(HttpStorageRpc.java:401) ... 21 more
Would appreciate a tooltip about this in the interface.
-Palash
Hi palash pandey,
Can you confirm whether you are receiving this error when creating a billing project in https://app.terra.bio/#billing? If so, can you please share a screenshot of the error?
Best,
Samantha
Please sign in to leave a comment.