Error map

Google provider: could not find default credentials Terraform: Error: Attempted to load application default credentials since neither `credentials` nor `access_token` was set in the provider block. No credentials loaded

Terraform · layer 6, Platform & cloud

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Google provider: could not find default credentials — Terraform: Error: Attempted to load application default credentials since neither `credentials` nor `access_token` was set in the provider block. No credentials loaded (Terraform)Google prov…UnrecognizedClientException — UnrecognizedClientException: The security token included in the request is invalid (AWS)UnrecognizedClientE…SignatureDoesNotMatch — AWS: SignatureDoesNotMatch / InvalidClientTokenId — the request signature we calculated does not match (AWS)SignatureDoesNotMat…Could not load the default credentials — Google Cloud: Error: Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started (Google Cloud / Firebase)Could not load the …ExpiredToken — AWS: ExpiredToken — The security token included in the request is expired (AWS)ExpiredToken409: The resource already exists — Compute Engine: ERROR: (gcloud.compute.instances.create) Could not fetch resource: The resource 'projects/p/zones/z/instances/vm-1' already exists (Google Cloud / Firebase)409: The resource a…Could not find credentials entry — Jenkins: ERROR: Could not find credentials entry with ID 'github-token' (CI/CD)Could not find cred…403: does not have storage.objects.get access — Cloud Storage: 403 Forbidden — user@example.com does not have storage.objects.get access to the Google Cloud Storage object (Google Cloud / Firebase)403: does not have …CORS: No Access-Control-Allow-Origin (Cloud Storage) — Browser: Access to fetch at 'https://storage.googleapis.com/bucket/file' from origin 'https://app.example.com' has been blocked by CORS policy (Google Cloud / Firebase)CORS: No Access-Con…Firebase CLI: Authentication Error: Your credentials are no longer valid — Firebase CLI: Error: Authentication Error: Your credentials are no longer valid. Please run firebase login --reauth (Google Cloud / Firebase)Firebase CLI: Authe…Artifact Registry: Permission artifactregistry.repositories.uploadArtifacts denied — Docker push: denied: Permission "artifactregistry.repositories.uploadArtifacts" denied on resource "projects/p/locations/l/repositories/r" (Google Cloud / Firebase)Artifact Registry: …Cloud Run 403: Your client does not have permission to get URL — Cloud Run: Error: Forbidden — Your client does not have permission to get URL / from this server (Google Cloud / Firebase)Cloud Run 403: Your…GKE: 0/3 nodes are available: Insufficient cpu — GKE/Kubernetes: Pod unschedulable — 0/3 nodes are available: 3 Insufficient cpu (Google Cloud / Firebase)GKE: 0/3 nodes are …publickey — Git: Permission denied (publickey). fatal: Could not read from remote repository. (Git)publickeyAADSTS700016 — Azure AD (Entra ID): AADSTS700016 Application not found in the directory (Azure)AADSTS700016401 — HTTP 401 Unauthorized (HTTP)401AccessDenied — AWS S3: AccessDenied (403) when calling GetObject / PutObject (AWS)AccessDeniedwebhook signature — Webhook signature verification failed (Stripe, Razorpay, GitHub…) (API)webhook signatureNoSuchKey — AWS S3: NoSuchKey / NoSuchBucket — The specified key/bucket does not exist (AWS)NoSuchKeyTokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredErrorinvalid_grant — OAuth 2.0 Error: invalid_grant (Authentication)invalid_grantinvalid_api_key — API Error: Invalid API Key / Incorrect API key provided (API)invalid_api_keykubectl connection refused — kubectl: The connection to the server localhost:8080 was refused — did you specify the right host or port? (Kubernetes)kubectl connection …NoCredentialsError — AWS: Unable to locate credentials / Could not load credentials from any providers (AWS)NoCredentialsErrorsession_start() — Warning: session_start(): Session cannot be started after headers have already been sent (PHP)session_start()API has not been used in project before or it is disabled — Google Cloud: 403 SERVICE_DISABLED — Cloud Resource Manager API has not been used in project 123456 before or it is disabled. Enable it by visiting (Google Cloud / Firebase)API has not been us…Your active project does not match the quota project in your local ADC — gcloud/ADC: WARNING: Your active project does not match the quota project in your local Application Default Credentials file (Google Cloud / Firebase)Your active project…ZONE_RESOURCE_POOL_EXHAUSTED — Compute Engine: The zone 'projects/p/zones/us-central1-a' does not have enough resources available to fulfill the request (ZONE_RESOURCE_POOL_EXHAUSTED) (Google Cloud / Firebase)ZONE_RESOURCE_POOL_…Input required and not supplied — GitHub Actions: Error: Input required and not supplied: token (CI/CD)Input required and …Cannot perform an interactive login from a non TTY device — GitHub Actions: Error: Cannot perform an interactive login from a non TTY device (CI/CD)Cannot perform an i…Waiting for next available executor — Jenkins: Still waiting to schedule task — Waiting for next available executor / 'agent1' is offline (CI/CD)Waiting for next av…FailedMount — Pod stuck ContainerCreating: MountVolume.SetUp failed / Unable to attach or mount volumes: timed out waiting for the condition (Kubernetes)FailedMountMulti-Attach error — Multi-Attach error for volume: Volume is already exclusively attached to one node and can't be attached to another (Kubernetes)Multi-Attach errorPVC Pending — PersistentVolumeClaim stuck in Pending (no persistent volumes available / waiting for first consumer) (Kubernetes)PVC PendingINSTALL_FAILED_INSUFFICIENT_STORAGE — INSTALL_FAILED_INSUFFICIENT_STORAGE: Failure [INSTALL_FAILED_INSUFFICIENT_STORAGE] (Android)INSTALL_FAILED_INSU…NoSuchBucket / 404 The specified bucket does not exist — Cloud Storage: 404 Not Found — The specified bucket does not exist / No such object: bucket/object (Google Cloud / Firebase)NoSuchBucket / 404 …SignatureDoesNotMatch (Cloud Storage signed URL) — Cloud Storage: SignatureDoesNotMatch — The request signature we calculated does not match the signature you provided (Google Cloud / Firebase)SignatureDoesNotMat…invalid reference format — docker: invalid reference format (repository name must be lowercase) (Docker)invalid reference f…No such container — Error response from daemon: No such container (Docker)No such containeris not running — Error response from daemon: Container X is not running (Docker)is not runningdenied — denied: requested access to the resource is denied (docker push) (Docker)deniedCloud Run: Image not found / failed to pull — Cloud Run: Revision 'svc-00005' is not ready — Image 'gcr.io/proj/app:latest' not found / Permission 'artifactregistry.repositories.downloadArtifacts' denied (Google Cloud / Firebase)Cloud Run: Image no…gcloud: Reauthentication failed / invalid_grant — gcloud: ERROR: (gcloud.auth.print-access-token) There was a problem refreshing your current auth tokens: Reauthentication failed. cannot prompt during non-interactive execution (Google Cloud / Firebase)gcloud: Reauthentic…Cloud Run 503: The request failed because the instance had an error — Cloud Run: 503 Service Unavailable — The request was aborted because there was no available instance (Google Cloud / Firebase)Cloud Run 503: The …Container memory limit exceeded — Cloud Run: Memory limit of 512 MiB exceeded with 530 MiB used. Consider increasing the memory limit (Google Cloud / Firebase)Container memory li…Cloud Run 504: The request has been terminated because it has reached the maximum request timeout — Cloud Run: 504 Gateway Timeout — The request has been terminated because it has reached the maximum request timeout (Google Cloud / Firebase)Cloud Run 504: The …OOMKilled — Kubernetes: OOMKilled (exit code 137) (Kubernetes)OOMKilledFailedScheduling — Kubernetes: Pod stuck in Pending — FailedScheduling: 0/3 nodes are available (Kubernetes)FailedSchedulingGKE: Quota 'CPUS' exceeded — GKE/Compute: Quota 'CPUS' exceeded. Limit: 8.0 in region us-central1 (QUOTA_EXCEEDED) (Google Cloud / Firebase)GKE: Quota 'CPUS' e…

Directly related (12)

UnrecognizedClientExceptionAWS

UnrecognizedClientException: The security token included in the request is invalid

The access key or session token isn’t recognised — wrong/deleted key, a session token missing for temporary credentials, or a reg…

SignatureDoesNotMatchAWS

AWS: SignatureDoesNotMatch / InvalidClientTokenId — the request signature we calculated does not match

AWS rejected the request signature — wrong secret key, wrong region, clock skew, or a presigned URL used differently from how it…

Could not load the default credentialsGoogle Cloud / Firebase

Google Cloud: Error: Could not load the default credentials. Browse to https://cloud.google.com/docs/authentication/getting-started

The Google client library found no Application Default Credentials (ADC) on this machine or environment.

ExpiredTokenAWS

AWS: ExpiredToken — The security token included in the request is expired

Temporary AWS credentials (STS/SSO/assumed role) have expired.

409: The resource already existsGoogle Cloud / Firebase

Compute Engine: ERROR: (gcloud.compute.instances.create) Could not fetch resource: The resource 'projects/p/zones/z/instances/vm-1' already exists

You tried to create a resource whose name is already taken in that scope.

Could not find credentials entryCI/CD

Jenkins: ERROR: Could not find credentials entry with ID 'github-token'

The Jenkinsfile references a credentials ID that does not exist in the scope Jenkins can see for this job.

403: does not have storage.objects.get accessGoogle Cloud / Firebase

Cloud Storage: 403 Forbidden — user@example.com does not have storage.objects.get access to the Google Cloud Storage object

The identity making the request has no read permission on that bucket or object.

CORS: No Access-Control-Allow-Origin (Cloud Storage)Google Cloud / Firebase

Browser: Access to fetch at 'https://storage.googleapis.com/bucket/file' from origin 'https://app.example.com' has been blocked by CORS policy

A browser upload/download to Cloud Storage was blocked because the bucket's CORS configuration doesn't allow your origin, method…

Firebase CLI: Authentication Error: Your credentials are no longer validGoogle Cloud / Firebase

Firebase CLI: Error: Authentication Error: Your credentials are no longer valid. Please run firebase login --reauth

The Firebase CLI's saved login expired or was revoked.

Artifact Registry: Permission artifactregistry.repositories.uploadArtifacts deniedGoogle Cloud / Firebase

Docker push: denied: Permission "artifactregistry.repositories.uploadArtifacts" denied on resource "projects/p/locations/l/repositories/r"

Your identity cannot push or pull images in that Artifact Registry repository, or Docker isn't authenticated to the registry host.

Cloud Run 403: Your client does not have permission to get URLGoogle Cloud / Firebase

Cloud Run: Error: Forbidden — Your client does not have permission to get URL / from this server

The Cloud Run service requires authentication and the caller has no valid identity token or the `roles/run.invoker` role.

GKE: 0/3 nodes are available: Insufficient cpuGoogle Cloud / Firebase

GKE/Kubernetes: Pod unschedulable — 0/3 nodes are available: 3 Insufficient cpu

The scheduler found no node with enough free CPU/memory for the pod's resource requests.

Two steps away (36)

publickeyGit

Git: Permission denied (publickey). fatal: Could not read from remote repository.

SSH authentication to GitHub/GitLab/Bitbucket failed — no key, wrong key, or the key isn’t added to your account.

AADSTS700016Azure

Azure AD (Entra ID): AADSTS700016 Application not found in the directory

The client ID in your sign-in request doesn’t exist in the tenant you’re authenticating against.

401HTTP

HTTP 401 Unauthorized

The request has no valid authentication credentials — you need to log in or send a valid token.

AccessDeniedAWS

AWS S3: AccessDenied (403) when calling GetObject / PutObject

An IAM policy, bucket policy, ACL/ownership setting, Block Public Access or KMS key policy denied the S3 request.

webhook signatureAPI

Webhook signature verification failed (Stripe, Razorpay, GitHub…)

Your endpoint computed a different HMAC signature than the one the provider sent, so the webhook is rejected.

NoSuchKeyAWS

AWS S3: NoSuchKey / NoSuchBucket — The specified key/bucket does not exist

S3 found no object at that key (or no bucket with that name in the region/account you’re calling).

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

invalid_grantAuthentication

OAuth 2.0 Error: invalid_grant

The authorization code, refresh token or credentials sent to the token endpoint are invalid, expired, already used or were issued…

invalid_api_keyAPI

API Error: Invalid API Key / Incorrect API key provided

The API didn’t recognise the key sent with the request — it’s wrong, revoked, from another environment, or sent in the wrong plac…

kubectl connection refusedKubernetes

kubectl: The connection to the server localhost:8080 was refused — did you specify the right host or port?

kubectl has no usable kubeconfig, so it falls back to localhost:8080 — or the cluster API server is unreachable.

NoCredentialsErrorAWS

AWS: Unable to locate credentials / Could not load credentials from any providers

The AWS CLI/SDK found no credentials in any place it looks — env vars, profile files, SSO cache or an instance/task role.

session_start()PHP

Warning: session_start(): Session cannot be started after headers have already been sent

session_start() ran after output was sent, so PHP can’t set the session cookie.

API has not been used in project before or it is disabledGoogle Cloud / Firebase

Google Cloud: 403 SERVICE_DISABLED — Cloud Resource Manager API has not been used in project 123456 before or it is disabled. Enable it by visiting

The Google API you called is not enabled for the project that the request is billed to.

Your active project does not match the quota project in your local ADCGoogle Cloud / Firebase

gcloud/ADC: WARNING: Your active project does not match the quota project in your local Application Default Credentials file

Application Default Credentials bill API usage to a different project than the one you have set as active, which can cause surpri…

ZONE_RESOURCE_POOL_EXHAUSTEDGoogle Cloud / Firebase

Compute Engine: The zone 'projects/p/zones/us-central1-a' does not have enough resources available to fulfill the request (ZONE_RESOURCE_POOL_EXHAUSTED)

Google has no spare capacity for that machine type in the zone right now.

Input required and not suppliedCI/CD

GitHub Actions: Error: Input required and not supplied: token

An action needs an input (token, ssh-key, api-key…) and the `with:` value is empty or missing — often because the secret does not…

Cannot perform an interactive login from a non TTY deviceCI/CD

GitHub Actions: Error: Cannot perform an interactive login from a non TTY device

`docker login` asked for a password interactively, but CI has no terminal — pass credentials non-interactively.

Waiting for next available executorCI/CD

Jenkins: Still waiting to schedule task — Waiting for next available executor / 'agent1' is offline

A Jenkins build is queued because no executor with the required label is free or the agent is offline.

FailedMountKubernetes

Pod stuck ContainerCreating: MountVolume.SetUp failed / Unable to attach or mount volumes: timed out waiting for the condition

The kubelet couldn’t mount one of the pod’s volumes, so the pod stays in ContainerCreating.

Multi-Attach errorKubernetes

Multi-Attach error for volume: Volume is already exclusively attached to one node and can't be attached to another

A ReadWriteOnce volume (EBS, Azure Disk, PD) is still attached to another node, so the new pod on a different node can’t use it.

PVC PendingKubernetes

PersistentVolumeClaim stuck in Pending (no persistent volumes available / waiting for first consumer)

The PVC hasn’t been bound to a volume, so pods using it can’t be scheduled.

INSTALL_FAILED_INSUFFICIENT_STORAGEAndroid

INSTALL_FAILED_INSUFFICIENT_STORAGE: Failure [INSTALL_FAILED_INSUFFICIENT_STORAGE]

The device or emulator doesn’t have enough free internal storage to install the APK.

NoSuchBucket / 404 The specified bucket does not existGoogle Cloud / Firebase

Cloud Storage: 404 Not Found — The specified bucket does not exist / No such object: bucket/object

The bucket or object name in your request doesn't exist (typo, deleted, wrong project, or a leading slash issue).

SignatureDoesNotMatch (Cloud Storage signed URL)Google Cloud / Firebase

Cloud Storage: SignatureDoesNotMatch — The request signature we calculated does not match the signature you provided

A signed URL was generated with different parameters than the request used (headers, method, content type, host, expiry or clock…

invalid reference formatDocker

docker: invalid reference format (repository name must be lowercase)

Docker couldn’t parse the image name — uppercase letters, spaces, an empty variable, or a misplaced option.

No such containerDocker

Error response from daemon: No such container

The container name or ID you used doesn’t exist on this Docker host — it was removed, has another name, or you’re talking to a di…

is not runningDocker

Error response from daemon: Container X is not running

You tried to exec into or interact with a container that has stopped.

deniedDocker

denied: requested access to the resource is denied (docker push)

You’re logged in, but not allowed to push to that repository — usually the image isn’t tagged with your own username/organisation.

Cloud Run: Image not found / failed to pullGoogle Cloud / Firebase

Cloud Run: Revision 'svc-00005' is not ready — Image 'gcr.io/proj/app:latest' not found / Permission 'artifactregistry.repositories.downloadArtifacts' denied

Cloud Run cannot pull the container image — it doesn't exist, the tag is wrong, or the service identity lacks access to the regis…

gcloud: Reauthentication failed / invalid_grantGoogle Cloud / Firebase

gcloud: ERROR: (gcloud.auth.print-access-token) There was a problem refreshing your current auth tokens: Reauthentication failed. cannot prompt during non-interactive execution

Your cached Google credentials expired or require a fresh login (session control or password change), and gcloud can't prompt.

Cloud Run 503: The request failed because the instance had an errorGoogle Cloud / Firebase

Cloud Run: 503 Service Unavailable — The request was aborted because there was no available instance

Cloud Run could not serve the request: no instance was ready, instances crashed, or the service hit its max-instances/concurrency…

Container memory limit exceededGoogle Cloud / Firebase

Cloud Run: Memory limit of 512 MiB exceeded with 530 MiB used. Consider increasing the memory limit

The container used more memory than the Cloud Run service allows, so the instance was terminated.

Cloud Run 504: The request has been terminated because it has reached the maximum request timeoutGoogle Cloud / Firebase

Cloud Run: 504 Gateway Timeout — The request has been terminated because it has reached the maximum request timeout

The request ran longer than the service's request timeout (default 5 minutes, max 60), so Cloud Run closed it.

OOMKilledKubernetes

Kubernetes: OOMKilled (exit code 137)

The container used more memory than its limit, and the kernel killed it.

FailedSchedulingKubernetes

Kubernetes: Pod stuck in Pending — FailedScheduling: 0/3 nodes are available

The scheduler can’t find a node that satisfies the pod’s resource requests, selectors, taints or volume constraints.

GKE: Quota 'CPUS' exceededGoogle Cloud / Firebase

GKE/Compute: Quota 'CPUS' exceeded. Limit: 8.0 in region us-central1 (QUOTA_EXCEEDED)

Creating nodes or clusters needs more vCPUs than your project's regional quota allows.