👀 Views: 77 💬 Answers: 1 📅 Created: 2025-06-06

gcp cloud-functions pubsub permissions JavaScript

I'm experimenting with I'm working with an scenario with my Google Cloud Functions that are meant to process Pub/Sub messages. Despite setting up everything correctly, the function fails with a `Permission denied` behavior when it tries to access a Google Cloud Storage bucket. The relevant behavior message I'm seeing in the logs is: ``` behavior: Permission denied while accessing bucket my-bucket-name ``` I've ensured that the service account used by my Cloud Function has the `roles/storage.objectViewer` role assigned. Here's the setup I've implemented: 1. Created a service account specifically for my Cloud Function with the necessary permissions. 2. Attached the service account to the Cloud Function during deployment. 3. The function is triggered by a Pub/Sub topic, which is configured correctly. Here’s a snippet of the deployment command I used: ```bash gcloud functions deploy myFunction \ --runtime nodejs14 \ --trigger-topic my-topic \ --service-account my-service-account@my-project.iam.gserviceaccount.com ``` Inside the function, I'm trying to access the bucket as follows: ```javascript const { Storage } = require('@google-cloud/storage'); const storage = new Storage(); exports.myFunction = async (message) => { const bucket = storage.bucket('my-bucket-name'); // Attempt to read a file const file = bucket.file('file.txt'); const contents = await file.download(); console.log(contents.toString()); }; ``` I also verified that the Pub/Sub topic and the Cloud Function are both in the same project. I've tried redeploying the function and even reassigned roles to the service account multiple times, but the scenario continues. Is there something I'm missing in the configuration or permissions that could lead to this behavior? The project is a CLI tool built with Javascript. Any examples would be super helpful.