Error map

ZONE_RESOURCE_POOL_EXHAUSTED Compute Engine: The zone 'projects/p/zones/us-central1-a' does not have enough resources available to fulfill the request (ZONE_RESOURCE_POOL_EXHAUSTED)

Google Cloud / Firebase · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (7). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

ZONE_RESOURCE_POOL_EXHAUSTED — Compute Engine: The zone 'projects/p/zones/us-central1-a' does not have enough resources available to fulfill the request (ZONE_RESOURCE_POOL_EXHAUSTED) (Google Cloud / Firebase)ZONE_RESOUR…Artifact Registry: Permission artifactregistry.repositories.uploadArtifacts denied — Docker push: denied: Permission "artifactregistry.repositories.uploadArtifacts" denied on resource "projects/p/locations/l/repositories/r" (Google Cloud / Firebase)Artifact Registry: …Compute Engine: Quota exceeded (regional limit) — Compute Engine: Quota 'N2_CPUS' exceeded. Limit: 24.0 in region europe-west1 / QUOTA_EXCEEDED (Google Cloud / Firebase)Compute Engine: Quo…409: The resource already exists — Compute Engine: ERROR: (gcloud.compute.instances.create) Could not fetch resource: The resource 'projects/p/zones/z/instances/vm-1' already exists (Google Cloud / Firebase)409: The resource a…API has not been used in project before or it is disabled — Google Cloud: 403 SERVICE_DISABLED — Cloud Resource Manager API has not been used in project 123456 before or it is disabled. Enable it by visiting (Google Cloud / Firebase)API has not been us…Your active project does not match the quota project in your local ADC — gcloud/ADC: WARNING: Your active project does not match the quota project in your local Application Default Credentials file (Google Cloud / Firebase)Your active project…IAP tunnel: Error 4033 not authorized — gcloud compute ssh: ERROR: (gcloud.compute.start-iap-tunnel) Error while connecting [4033: 'not authorized'] (Google Cloud / Firebase)IAP tunnel: Error 4…GKE: Quota 'CPUS' exceeded — GKE/Compute: Quota 'CPUS' exceeded. Limit: 8.0 in region us-central1 (QUOTA_EXCEEDED) (Google Cloud / Firebase)GKE: Quota 'CPUS' e…denied — denied: requested access to the resource is denied (docker push) (Docker)deniedCloud Run: Image not found / failed to pull — Cloud Run: Revision 'svc-00005' is not ready — Image 'gcr.io/proj/app:latest' not found / Permission 'artifactregistry.repositories.downloadArtifacts' denied (Google Cloud / Firebase)Cloud Run: Image no…gcloud: Reauthentication failed / invalid_grant — gcloud: ERROR: (gcloud.auth.print-access-token) There was a problem refreshing your current auth tokens: Reauthentication failed. cannot prompt during non-interactive execution (Google Cloud / Firebase)gcloud: Reauthentic…429 RESOURCE_EXHAUSTED: Quota exceeded for quota metric — Google API: 429 RESOURCE_EXHAUSTED — Quota exceeded for quota metric 'Read requests' and limit 'Read requests per minute per user' (Google Cloud / Firebase)429 RESOURCE_EXHAUS…BigQuery: Quota exceeded: Your project exceeded quota for free query bytes scanned — BigQuery: Quota exceeded: Your project exceeded quota for free query bytes scanned. Consider enabling billing (Google Cloud / Firebase)BigQuery: Quota exc…BigQuery: Access Denied: Project: User does not have bigquery.jobs.create permission — BigQuery: Access Denied: Project my-project: User does not have bigquery.jobs.create permission in project my-project (Google Cloud / Firebase)BigQuery: Access De…no endpoints — Service has no endpoints (no endpoints available for service / Endpoints: <none>) (Kubernetes)no endpointsprovided port is not in the valid range — spec.ports[0].nodePort: Invalid value: 80: provided port is not in the valid range. The range of valid ports is 30000-32767 (Kubernetes)provided port is no…startForeground not called — Context.startForegroundService() did not then call Service.startForeground() / ForegroundServiceStartNotAllowedException (Android)startForeground not…Could not load the default credentials — Google Cloud: Error: Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started (Google Cloud / Firebase)Could not load the …Cloud Run 503: The request failed because the instance had an error — Cloud Run: 503 Service Unavailable — The request was aborted because there was no available instance (Google Cloud / Firebase)Cloud Run 503: The …Container memory limit exceeded — Cloud Run: Memory limit of 512 MiB exceeded with 530 MiB used. Consider increasing the memory limit (Google Cloud / Firebase)Container memory li…PERMISSION_DENIED: Permission 'x' denied on resource — Google Cloud: 403 PERMISSION_DENIED — Permission 'storage.objects.get' denied on resource (or it may not exist) (Google Cloud / Firebase)PERMISSION_DENIED: …GKE: 0/3 nodes are available: Insufficient cpu — GKE/Kubernetes: Pod unschedulable — 0/3 nodes are available: 3 Insufficient cpu (Google Cloud / Firebase)GKE: 0/3 nodes are …gke-gcloud-auth-plugin not found — kubectl: error: executable gke-gcloud-auth-plugin not found — it looks like you are trying to use a client-go credential plugin that is not installed (Google Cloud / Firebase)gke-gcloud-auth-plu…GKE Ingress: backends marked UNHEALTHY (502) — GKE Ingress: Some backend services are in UNHEALTHY state / 502 Server Error from the load balancer (Google Cloud / Firebase)GKE Ingress: backen…

Directly related (7)

Artifact Registry: Permission artifactregistry.repositories.uploadArtifacts deniedGoogle Cloud / Firebase

Docker push: denied: Permission "artifactregistry.repositories.uploadArtifacts" denied on resource "projects/p/locations/l/repositories/r"

Your identity cannot push or pull images in that Artifact Registry repository, or Docker isn't authenticated to the registry host.

Compute Engine: Quota exceeded (regional limit)Google Cloud / Firebase

Compute Engine: Quota 'N2_CPUS' exceeded. Limit: 24.0 in region europe-west1 / QUOTA_EXCEEDED

The project reached a regional Compute Engine quota (vCPUs per machine family, GPUs, disks, addresses).

409: The resource already existsGoogle Cloud / Firebase

Compute Engine: ERROR: (gcloud.compute.instances.create) Could not fetch resource: The resource 'projects/p/zones/z/instances/vm-1' already exists

You tried to create a resource whose name is already taken in that scope.

API has not been used in project before or it is disabledGoogle Cloud / Firebase

Google Cloud: 403 SERVICE_DISABLED — Cloud Resource Manager API has not been used in project 123456 before or it is disabled. Enable it by visiting

The Google API you called is not enabled for the project that the request is billed to.

Your active project does not match the quota project in your local ADCGoogle Cloud / Firebase

gcloud/ADC: WARNING: Your active project does not match the quota project in your local Application Default Credentials file

Application Default Credentials bill API usage to a different project than the one you have set as active, which can cause surpri…

IAP tunnel: Error 4033 not authorizedGoogle Cloud / Firebase

gcloud compute ssh: ERROR: (gcloud.compute.start-iap-tunnel) Error while connecting [4033: 'not authorized']

SSH through Identity-Aware Proxy failed because you lack IAP tunnel permission or the firewall doesn't allow IAP's range.

GKE: Quota 'CPUS' exceededGoogle Cloud / Firebase

GKE/Compute: Quota 'CPUS' exceeded. Limit: 8.0 in region us-central1 (QUOTA_EXCEEDED)

Creating nodes or clusters needs more vCPUs than your project's regional quota allows.

Two steps away (16)

deniedDocker

denied: requested access to the resource is denied (docker push)

You’re logged in, but not allowed to push to that repository — usually the image isn’t tagged with your own username/organisation.

Cloud Run: Image not found / failed to pullGoogle Cloud / Firebase

Cloud Run: Revision 'svc-00005' is not ready — Image 'gcr.io/proj/app:latest' not found / Permission 'artifactregistry.repositories.downloadArtifacts' denied

Cloud Run cannot pull the container image — it doesn't exist, the tag is wrong, or the service identity lacks access to the regis…

gcloud: Reauthentication failed / invalid_grantGoogle Cloud / Firebase

gcloud: ERROR: (gcloud.auth.print-access-token) There was a problem refreshing your current auth tokens: Reauthentication failed. cannot prompt during non-interactive execution

Your cached Google credentials expired or require a fresh login (session control or password change), and gcloud can't prompt.

429 RESOURCE_EXHAUSTED: Quota exceeded for quota metricGoogle Cloud / Firebase

Google API: 429 RESOURCE_EXHAUSTED — Quota exceeded for quota metric 'Read requests' and limit 'Read requests per minute per user'

Your project or user exceeded an API rate or daily quota.

BigQuery: Quota exceeded: Your project exceeded quota for free query bytes scannedGoogle Cloud / Firebase

BigQuery: Quota exceeded: Your project exceeded quota for free query bytes scanned. Consider enabling billing

A free-tier/sandbox project used its monthly or daily query processing allowance.

BigQuery: Access Denied: Project: User does not have bigquery.jobs.create permissionGoogle Cloud / Firebase

BigQuery: Access Denied: Project my-project: User does not have bigquery.jobs.create permission in project my-project

The principal can read data but is not allowed to run query jobs in the project used for billing.

no endpointsKubernetes

Service has no endpoints (no endpoints available for service / Endpoints: <none>)

The Service’s selector matches no ready pods, so traffic to it is refused or returns 503.

provided port is not in the valid rangeKubernetes

spec.ports[0].nodePort: Invalid value: 80: provided port is not in the valid range. The range of valid ports is 30000-32767

A NodePort Service asked for a port outside the cluster’s NodePort range (default 30000–32767).

startForeground not calledAndroid

Context.startForegroundService() did not then call Service.startForeground() / ForegroundServiceStartNotAllowedException

A foreground service didn’t call startForeground() within a few seconds, or the app tried to start one from the background where…

Could not load the default credentialsGoogle Cloud / Firebase

Google Cloud: Error: Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started

The Google client library found no Application Default Credentials (ADC) on this machine or environment.

Cloud Run 503: The request failed because the instance had an errorGoogle Cloud / Firebase

Cloud Run: 503 Service Unavailable — The request was aborted because there was no available instance

Cloud Run could not serve the request: no instance was ready, instances crashed, or the service hit its max-instances/concurrency…

Container memory limit exceededGoogle Cloud / Firebase

Cloud Run: Memory limit of 512 MiB exceeded with 530 MiB used. Consider increasing the memory limit

The container used more memory than the Cloud Run service allows, so the instance was terminated.

PERMISSION_DENIED: Permission 'x' denied on resourceGoogle Cloud / Firebase

Google Cloud: 403 PERMISSION_DENIED — Permission 'storage.objects.get' denied on resource (or it may not exist)

The caller's identity lacks the IAM permission named in the message on that resource.

GKE: 0/3 nodes are available: Insufficient cpuGoogle Cloud / Firebase

GKE/Kubernetes: Pod unschedulable — 0/3 nodes are available: 3 Insufficient cpu

The scheduler found no node with enough free CPU/memory for the pod's resource requests.

gke-gcloud-auth-plugin not foundGoogle Cloud / Firebase

kubectl: error: executable gke-gcloud-auth-plugin not found — it looks like you are trying to use a client-go credential plugin that is not installed

kubectl needs the `gke-gcloud-auth-plugin` binary to authenticate to GKE, and it is missing from PATH.

GKE Ingress: backends marked UNHEALTHY (502)Google Cloud / Firebase

GKE Ingress: Some backend services are in UNHEALTHY state / 502 Server Error from the load balancer

The Google load balancer's health checks fail for the Ingress backends, so it returns 502 or 'no healthy upstream'.