Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NodeJS Managed VM receiving 403 on datastore writes (after using gcloud ...deploy --remote) #783

Closed
camilosilva opened this issue Aug 6, 2015 · 5 comments
Assignees

Comments

@camilosilva
Copy link

Dear Google Team:

I just tried deploying my NodeJS app to my project with the new remote dockerless option:
"gcloud preview app deploy app.yaml --set-default --remote"
The deployment process seemed to be fine -- meaning no errors occurred while deploying.

After the deployment was performed, Interestingly all my GET requests that read data from the datastore are successful.

However, when I try to POST where the data is supposed to be written to the datastore, I keep receiving the 'Forbidden' 403.

This is very weird and awckard since when I run my node app on my localhost, I am able to read/store to my datastore cloud instance without issues.

Please let me know if this might not be the proper place to address this issue.
I'm about to submit on the Google Groups App Engine as well as in the code.google.com

Thanks for your help.
Camilo.

@stephenplusplus
Copy link
Contributor

We can close here in favor of the progress tracked over at https://github.com/GoogleCloudPlatform/gcloud/issues/31. I don't believe this to be an issue with our library, as it works locally. However, if something needs to be changed on our part, please come back and re-open.

Please post a link here to the Google Groups post you make.

@camilosilva
Copy link
Author

Thanks for getting back to me so promptly.
Here's the Google Groups post:
https://groups.google.com/forum/#!topic/google-appengine/xDmDUy4ora0

I'll keep you posted if anything. Thanks!

@camilosilva
Copy link
Author

An important follow up. See below for the stack printout of the error:

{
"status": "ERROR",
"error": {
"code": 403,
"message": "Forbidden",
"stack": "Error: Forbidden\n at Object.parseApiResp (/app/node_modules/gcloud/lib/common/util.js:168:22)\n at Object.handleResp (/app/node_modules/gcloud/lib/common/util.js:139:25)\n at IncomingMessage. (/app/node_modules/gcloud/lib/datastore/request.js:785:16)\n at IncomingMessage.emit (events.js:129:20)\n at _stream_readable.js:908:16\n at process._tickCallback (node.js:355:11)"
}
}

The above is the custom JSON response I have in place.
Just in case, I have on my local docker version 1.5.0 (in case this matters)
All of my deployments are now being done with the dockerless option (local testing has been done in the same fashion as well).

BTW, after going through these instructions again:
https://googlecloudplatform.github.io/gcloud-node/#/authorization

I retried with the Service Account authentication and it worked.
I am not sure why the normal suggested method by using just the Scopes did not work in my case for the Managed VM.

Anyways, I am good for now. I'm just wondering what the performance implications are by using the service account auth instead of the smoother alternative of using the scopes only.

Let me know your thoughts. Thanks.

@jgeewax
Copy link
Contributor

jgeewax commented Aug 10, 2015

It's possible that when the Managed VM was created, it wasn't getting the access it needed to talk to Datastore (ie, when you create a Compute Engine instance, you need to specifically say "this should be able to talk to Datastore).

If so, that's an error on our side... @ajessup any thoughts?

@jgeewax
Copy link
Contributor

jgeewax commented Aug 10, 2015

/cc @JustinBeckwith

sofisl pushed a commit that referenced this issue Nov 11, 2022
sofisl pushed a commit that referenced this issue Jan 10, 2023
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [jsdoc](https://togithub.com/jsdoc/jsdoc) | [`^3.5.5` -> `^4.0.0`](https://renovatebot.com/diffs/npm/jsdoc/3.6.11/4.0.0) | [![age](https://badges.renovateapi.com/packages/npm/jsdoc/4.0.0/age-slim)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://badges.renovateapi.com/packages/npm/jsdoc/4.0.0/adoption-slim)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://badges.renovateapi.com/packages/npm/jsdoc/4.0.0/compatibility-slim/3.6.11)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://badges.renovateapi.com/packages/npm/jsdoc/4.0.0/confidence-slim/3.6.11)](https://docs.renovatebot.com/merge-confidence/) |

---

### Release Notes

<details>
<summary>jsdoc/jsdoc</summary>

### [`v4.0.0`](https://togithub.com/jsdoc/jsdoc/blob/HEAD/CHANGES.md#&#8203;400-November-2022)

[Compare Source](https://togithub.com/jsdoc/jsdoc/compare/3.6.11...084218523a7d69fec14a852ce680f374f526af28)

-   JSDoc releases now use [semantic versioning](https://semver.org/). If JSDoc makes
    backwards-incompatible changes in the future, the major version will be incremented.
-   JSDoc no longer uses the [`taffydb`](https://taffydb.com/) package. If your JSDoc template or
    plugin uses the `taffydb` package, see the
    [instructions for replacing `taffydb` with `@jsdoc/salty`](https://togithub.com/jsdoc/jsdoc/tree/main/packages/jsdoc-salty#use-salty-in-a-jsdoc-template).
-   JSDoc now supports Node.js 12.0.0 and later.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 9am and before 3pm" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/googleapis/nodejs-dlp).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xNy4xIiwidXBkYXRlZEluVmVyIjoiMzQuMTcuMSJ9-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants