Skip to content

Instantly share code, notes, and snippets.

@micaiah-effiong
Created April 5, 2023 14:14
Show Gist options
  • Select an option

  • Save micaiah-effiong/e4bbea33518caf4a41241e895bccf27a to your computer and use it in GitHub Desktop.

Select an option

Save micaiah-effiong/e4bbea33518caf4a41241e895bccf27a to your computer and use it in GitHub Desktop.
APIs and roles needed for deploying firebase functions using service account

APIs and roles needed for deploying firebase functions using service account

Date: 5th April, 2023.

Time: 3:00pm WAT.

Report:

Succesfully deployed a firebase function, using a service account.
This was me trying not to use the ci token as it was flagged unsafe.

This gist contains the roles needed for your service account to deploy properly It also contains a list of APIs that should must be enabled on Google Cloud Console.

Just know that I was very frustrated at this point I may have forgotten a few other roles or APIs. If so, may God help you as you figure out what was left out.

### Roles
- Artifact Registry Writer
- Cloud Functions Admin
- Cloud Run Viewer
- Firebase Authentication Admin
- Firebase Hosting Admin
- Service Account User
### APIs
- Cloud Functions API
- Firebase Hosting API
- Cloud Logging API
- Service Usage API
- Firebase Management API
- Cloud Resource Manager API
- Identity Toolkit API
- Cloud Pub/Sub API
- Cloud Runtime Configuration API
- Cloud Firestore API
- Firebase Installations API
- Artifact Registry API
- Identity and Access Management (IAM) API
- Cloud Build API

If anyone ever finds this gist, just know that I work this hard so you won't have to...

HERE LIES A HERO

@ukor
Copy link

ukor commented Aug 14, 2023

Add the Firebase Develop Admin Role if you want to update Firebase config with CLI.

The Firebase Develop Admin will allow commands like this to work

 firebase functions:config:unset <SECRET_NAME>
 firebase functions:config:set secret_name=top_secret

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment