Error map

Pub/Sub: messages redelivered (ack deadline exceeded) Pub/Sub: Messages keep being redelivered — acknowledgement deadline expired before the subscriber acked

Google Cloud / Firebase · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (9). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Pub/Sub: messages redelivered (ack deadline exceeded) — Pub/Sub: Messages keep being redelivered — acknowledgement deadline expired before the subscriber acked (Google Cloud / Firebase)Pub/Sub: me…Artifact Registry: Permission artifactregistry.repositories.uploadArtifacts denied — Docker push: denied: Permission "artifactregistry.repositories.uploadArtifacts" denied on resource "projects/p/locations/l/repositories/r" (Google Cloud / Firebase)Artifact Registry: …BigQuery: Access Denied: Project: User does not have bigquery.jobs.create permission — BigQuery: Access Denied: Project my-project: User does not have bigquery.jobs.create permission in project my-project (Google Cloud / Firebase)BigQuery: Access De…Error 403: API has not been used in project (Terraform) — Terraform: Error: Error creating Network: googleapi: Error 403: Compute Engine API has not been used in project 123 before or it is disabled (Terraform)Error 403: API has …API has not been used in project before or it is disabled — Google Cloud: 403 SERVICE_DISABLED — Cloud Resource Manager API has not been used in project 123456 before or it is disabled. Enable it by visiting (Google Cloud / Firebase)API has not been us…Your active project does not match the quota project in your local ADC — gcloud/ADC: WARNING: Your active project does not match the quota project in your local Application Default Credentials file (Google Cloud / Firebase)Your active project…429 RESOURCE_EXHAUSTED: Quota exceeded for quota metric — Google API: 429 RESOURCE_EXHAUSTED — Quota exceeded for quota metric 'Read requests' and limit 'Read requests per minute per user' (Google Cloud / Firebase)429 RESOURCE_EXHAUS…Pub/Sub NOT_FOUND: Resource not found (topic/subscription) — Pub/Sub: 5 NOT_FOUND: Resource not found (resource=my-topic) (Google Cloud / Firebase)Pub/Sub NOT_FOUND: …Cloud Functions: Function execution took 60000 ms, finished with status: timeout — Cloud Functions: Function execution took 60002 ms, finished with status: 'timeout' (Google Cloud / Firebase)Cloud Functions: Fu…Google provider: could not find default credentials — Terraform: Error: Attempted to load application default credentials since neither `credentials` nor `access_token` was set in the provider block. No credentials loaded (Terraform)Google provider: co…denied — denied: requested access to the resource is denied (docker push) (Docker)deniedCloud Run: Image not found / failed to pull — Cloud Run: Revision 'svc-00005' is not ready — Image 'gcr.io/proj/app:latest' not found / Permission 'artifactregistry.repositories.downloadArtifacts' denied (Google Cloud / Firebase)Cloud Run: Image no…gcloud: Reauthentication failed / invalid_grant — gcloud: ERROR: (gcloud.auth.print-access-token) There was a problem refreshing your current auth tokens: Reauthentication failed. cannot prompt during non-interactive execution (Google Cloud / Firebase)gcloud: Reauthentic…Cloud Run 403: Your client does not have permission to get URL — Cloud Run: Error: Forbidden — Your client does not have permission to get URL / from this server (Google Cloud / Firebase)Cloud Run 403: Your…PERMISSION_DENIED: Permission 'x' denied on resource — Google Cloud: 403 PERMISSION_DENIED — Permission 'storage.objects.get' denied on resource (or it may not exist) (Google Cloud / Firebase)PERMISSION_DENIED: …Key creation is not allowed on this service account — GCP: FAILED_PRECONDITION: Key creation is not allowed on this service account (constraints/iam.disableServiceAccountKeyCreation) (Google Cloud / Firebase)Key creation is not…Cloud Run 503: The request failed because the instance had an error — Cloud Run: 503 Service Unavailable — The request was aborted because there was no available instance (Google Cloud / Firebase)Cloud Run 503: The …Container memory limit exceeded — Cloud Run: Memory limit of 512 MiB exceeded with 530 MiB used. Consider increasing the memory limit (Google Cloud / Firebase)Container memory li…Cloud Run 504: The request has been terminated because it has reached the maximum request timeout — Cloud Run: 504 Gateway Timeout — The request has been terminated because it has reached the maximum request timeout (Google Cloud / Firebase)Cloud Run 504: The …no endpoints — Service has no endpoints (no endpoints available for service / Endpoints: <none>) (Kubernetes)no endpointsprovided port is not in the valid range — spec.ports[0].nodePort: Invalid value: 80: provided port is not in the valid range. The range of valid ports is 30000-32767 (Kubernetes)provided port is no…startForeground not called — Context.startForegroundService() did not then call Service.startForeground() / ForegroundServiceStartNotAllowedException (Android)startForeground not…Could not load the default credentials — Google Cloud: Error: Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started (Google Cloud / Firebase)Could not load the …GKE: 0/3 nodes are available: Insufficient cpu — GKE/Kubernetes: Pod unschedulable — 0/3 nodes are available: 3 Insufficient cpu (Google Cloud / Firebase)GKE: 0/3 nodes are …gke-gcloud-auth-plugin not found — kubectl: error: executable gke-gcloud-auth-plugin not found — it looks like you are trying to use a client-go credential plugin that is not installed (Google Cloud / Firebase)gke-gcloud-auth-plu…context deadline exceeded — Go: Get "https://api.example.com": context deadline exceeded (Client.Timeout exceeded while awaiting headers) (Go)context deadline ex…GKE: Quota 'CPUS' exceeded — GKE/Compute: Quota 'CPUS' exceeded. Limit: 8.0 in region us-central1 (QUOTA_EXCEEDED) (Google Cloud / Firebase)GKE: Quota 'CPUS' e…Compute Engine: Quota exceeded (regional limit) — Compute Engine: Quota 'N2_CPUS' exceeded. Limit: 24.0 in region europe-west1 / QUOTA_EXCEEDED (Google Cloud / Firebase)Compute Engine: Quo…Cloud Functions: Function failed on loading user code — Cloud Functions: Provided module can't be loaded / Function failed on loading user code. This is likely due to a bug in the user code (Google Cloud / Firebase)Cloud Functions: Fu…Cloud Functions: Build failed — Cloud Functions: Build failed: function.js does not exist / npm install failed with exit code 1 (Cloud Build step) (Google Cloud / Firebase)Cloud Functions: Bu…ExpiredToken — AWS: ExpiredToken — The security token included in the request is expired (AWS)ExpiredTokenSignatureDoesNotMatch — AWS: SignatureDoesNotMatch / InvalidClientTokenId — the request signature we calculated does not match (AWS)SignatureDoesNotMat…UnrecognizedClientException — UnrecognizedClientException: The security token included in the request is invalid (AWS)UnrecognizedClientE…

Directly related (9)

Artifact Registry: Permission artifactregistry.repositories.uploadArtifacts deniedGoogle Cloud / Firebase

Docker push: denied: Permission "artifactregistry.repositories.uploadArtifacts" denied on resource "projects/p/locations/l/repositories/r"

Your identity cannot push or pull images in that Artifact Registry repository, or Docker isn't authenticated to the registry host.

BigQuery: Access Denied: Project: User does not have bigquery.jobs.create permissionGoogle Cloud / Firebase

BigQuery: Access Denied: Project my-project: User does not have bigquery.jobs.create permission in project my-project

The principal can read data but is not allowed to run query jobs in the project used for billing.

Error 403: API has not been used in project (Terraform)Terraform

Terraform: Error: Error creating Network: googleapi: Error 403: Compute Engine API has not been used in project 123 before or it is disabled

Terraform called a Google API that isn't enabled in the project.

API has not been used in project before or it is disabledGoogle Cloud / Firebase

Google Cloud: 403 SERVICE_DISABLED — Cloud Resource Manager API has not been used in project 123456 before or it is disabled. Enable it by visiting

The Google API you called is not enabled for the project that the request is billed to.

Your active project does not match the quota project in your local ADCGoogle Cloud / Firebase

gcloud/ADC: WARNING: Your active project does not match the quota project in your local Application Default Credentials file

Application Default Credentials bill API usage to a different project than the one you have set as active, which can cause surpri…

429 RESOURCE_EXHAUSTED: Quota exceeded for quota metricGoogle Cloud / Firebase

Google API: 429 RESOURCE_EXHAUSTED — Quota exceeded for quota metric 'Read requests' and limit 'Read requests per minute per user'

Your project or user exceeded an API rate or daily quota.

Pub/Sub NOT_FOUND: Resource not found (topic/subscription)Google Cloud / Firebase

Pub/Sub: 5 NOT_FOUND: Resource not found (resource=my-topic)

The topic or subscription you used doesn't exist in the project the client is configured for.

Cloud Functions: Function execution took 60000 ms, finished with status: timeoutGoogle Cloud / Firebase

Cloud Functions: Function execution took 60002 ms, finished with status: 'timeout'

The function ran past its timeout (default 60s for HTTP 1st gen) and was terminated.

Google provider: could not find default credentialsTerraform

Terraform: Error: Attempted to load application default credentials since neither `credentials` nor `access_token` was set in the provider block. No credentials loaded

The Google provider has no credentials (ADC, service account key, impersonation).

Two steps away (23)

deniedDocker

denied: requested access to the resource is denied (docker push)

You’re logged in, but not allowed to push to that repository — usually the image isn’t tagged with your own username/organisation.

Cloud Run: Image not found / failed to pullGoogle Cloud / Firebase

Cloud Run: Revision 'svc-00005' is not ready — Image 'gcr.io/proj/app:latest' not found / Permission 'artifactregistry.repositories.downloadArtifacts' denied

Cloud Run cannot pull the container image — it doesn't exist, the tag is wrong, or the service identity lacks access to the regis…

gcloud: Reauthentication failed / invalid_grantGoogle Cloud / Firebase

gcloud: ERROR: (gcloud.auth.print-access-token) There was a problem refreshing your current auth tokens: Reauthentication failed. cannot prompt during non-interactive execution

Your cached Google credentials expired or require a fresh login (session control or password change), and gcloud can't prompt.

Cloud Run 403: Your client does not have permission to get URLGoogle Cloud / Firebase

Cloud Run: Error: Forbidden — Your client does not have permission to get URL / from this server

The Cloud Run service requires authentication and the caller has no valid identity token or the `roles/run.invoker` role.

PERMISSION_DENIED: Permission 'x' denied on resourceGoogle Cloud / Firebase

Google Cloud: 403 PERMISSION_DENIED — Permission 'storage.objects.get' denied on resource (or it may not exist)

The caller's identity lacks the IAM permission named in the message on that resource.

Key creation is not allowed on this service accountGoogle Cloud / Firebase

GCP: FAILED_PRECONDITION: Key creation is not allowed on this service account (constraints/iam.disableServiceAccountKeyCreation)

An organisation policy forbids creating downloadable JSON keys for service accounts.

Cloud Run 503: The request failed because the instance had an errorGoogle Cloud / Firebase

Cloud Run: 503 Service Unavailable — The request was aborted because there was no available instance

Cloud Run could not serve the request: no instance was ready, instances crashed, or the service hit its max-instances/concurrency…

Container memory limit exceededGoogle Cloud / Firebase

Cloud Run: Memory limit of 512 MiB exceeded with 530 MiB used. Consider increasing the memory limit

The container used more memory than the Cloud Run service allows, so the instance was terminated.

Cloud Run 504: The request has been terminated because it has reached the maximum request timeoutGoogle Cloud / Firebase

Cloud Run: 504 Gateway Timeout — The request has been terminated because it has reached the maximum request timeout

The request ran longer than the service's request timeout (default 5 minutes, max 60), so Cloud Run closed it.

no endpointsKubernetes

Service has no endpoints (no endpoints available for service / Endpoints: <none>)

The Service’s selector matches no ready pods, so traffic to it is refused or returns 503.

provided port is not in the valid rangeKubernetes

spec.ports[0].nodePort: Invalid value: 80: provided port is not in the valid range. The range of valid ports is 30000-32767

A NodePort Service asked for a port outside the cluster’s NodePort range (default 30000–32767).

startForeground not calledAndroid

Context.startForegroundService() did not then call Service.startForeground() / ForegroundServiceStartNotAllowedException

A foreground service didn’t call startForeground() within a few seconds, or the app tried to start one from the background where…

Could not load the default credentialsGoogle Cloud / Firebase

Google Cloud: Error: Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started

The Google client library found no Application Default Credentials (ADC) on this machine or environment.

GKE: 0/3 nodes are available: Insufficient cpuGoogle Cloud / Firebase

GKE/Kubernetes: Pod unschedulable — 0/3 nodes are available: 3 Insufficient cpu

The scheduler found no node with enough free CPU/memory for the pod's resource requests.

gke-gcloud-auth-plugin not foundGoogle Cloud / Firebase

kubectl: error: executable gke-gcloud-auth-plugin not found — it looks like you are trying to use a client-go credential plugin that is not installed

kubectl needs the `gke-gcloud-auth-plugin` binary to authenticate to GKE, and it is missing from PATH.

context deadline exceededGo

Go: Get "https://api.example.com": context deadline exceeded (Client.Timeout exceeded while awaiting headers)

An operation did not finish before its context deadline or HTTP client timeout.

GKE: Quota 'CPUS' exceededGoogle Cloud / Firebase

GKE/Compute: Quota 'CPUS' exceeded. Limit: 8.0 in region us-central1 (QUOTA_EXCEEDED)

Creating nodes or clusters needs more vCPUs than your project's regional quota allows.

Compute Engine: Quota exceeded (regional limit)Google Cloud / Firebase

Compute Engine: Quota 'N2_CPUS' exceeded. Limit: 24.0 in region europe-west1 / QUOTA_EXCEEDED

The project reached a regional Compute Engine quota (vCPUs per machine family, GPUs, disks, addresses).

Cloud Functions: Function failed on loading user codeGoogle Cloud / Firebase

Cloud Functions: Provided module can't be loaded / Function failed on loading user code. This is likely due to a bug in the user code

The function started but could not import/initialise your code, so every invocation fails.

Cloud Functions: Build failedGoogle Cloud / Firebase

Cloud Functions: Build failed: function.js does not exist / npm install failed with exit code 1 (Cloud Build step)

The deployment's build step (Cloud Build) failed, so no new function version was created.

ExpiredTokenAWS

AWS: ExpiredToken — The security token included in the request is expired

Temporary AWS credentials (STS/SSO/assumed role) have expired.

SignatureDoesNotMatchAWS

AWS: SignatureDoesNotMatch / InvalidClientTokenId — the request signature we calculated does not match

AWS rejected the request signature — wrong secret key, wrong region, clock skew, or a presigned URL used differently from how it…

UnrecognizedClientExceptionAWS

UnrecognizedClientException: The security token included in the request is invalid

The access key or session token isn’t recognised — wrong/deleted key, a session token missing for temporary credentials, or a reg…