无法通过 java sdk 在谷歌云存储中连接和创建存储桶

Question

I am unable to create a google cloud storage bucket using the java sdk, below is the code I am using:

public class App 
{
    public static void main(String... args) throws Exception {

         String projectId = "**********";

         Storage storage = StorageOptions.newBuilder().setProjectId(projectId).build().getService();
            Page<Bucket> buckets = storage.list();

            for (Bucket bucket : buckets.iterateAll()) {
              System.out.println(bucket.getName());
            }

      }
}

And this is the error message I am getting:

Caused by: com.google.api.client.googleapis.json.GoogleJsonResponseException: 401 Unauthorized { "code" : 401, "errors" : [ { "domain" : "global", "location" : "Authorization", "locationType" : "header", "message" : "Anonymous caller does not have storage.buckets.list access to project 833568054484.", "reason" : "required" } ], "message" : "Anonymous caller does not have storage.buckets.list access to project 833568054484." }

Answer 1

You are not authenticating, you can check how to add permissions to your bucket on the Using Cloud IAM permissions documentation .

If you want to give access to authenticated users you have to select the user group allAuthenticatedUsers and give them the Storage Object Viewer Role. This will allow all authenticated users, even anonymously, view/list permissions in your bucket.

NOTE: As you can see on this documentation , the allAuthenticatedUsers member types should only be used when it is acceptable for anyone on the Internet to read and analyze your data. So you should consider a different access management type if that is not the case for you.

Answer 2

1. Create a service account

2. Creating a service account key for the service account just created. Remember the path where you store the key.json file.

3. Assign to the service account the role Storage Admin

4. Provide credentials to your application

a. Using env variable

export GOOGLE_APPLICATION_CREDENTIALS="/home/user/Downloads/[FILE_NAME].json" 

b.Explicit in code

static void authExplicit(String jsonPath) throws IOException {
  // You can specify a credential file by providing a path to GoogleCredentials.
  // Otherwise credentials are read from the GOOGLE_APPLICATION_CREDENTIALS environment variable.
  GoogleCredentials credentials = GoogleCredentials.fromStream(new FileInputStream(jsonPath))
        .createScoped(Lists.newArrayList("https://www.googleapis.com/auth/cloud-platform"));
  Storage storage = StorageOptions.newBuilder().setCredentials(credentials).build().getService();

  System.out.println("Buckets:");
  Page<Bucket> buckets = storage.list();
  for (Bucket bucket : buckets.iterateAll()) {
    System.out.println(bucket.toString());
  }
}