0
votes

I am trying to use a gcloud load balancer to serve different storage buckets.

Example:

http://{static ip}/ (default bucket)

http://{static ip}/bucket1

I have reserved a static IP & setup a firewall rule, but when it comes to serving the bucket contents, I'm getting a permissions error.

Anonymous caller does not have storage.objects.list

Can anyone give me some pointers?

Thanks

1

1 Answers

1
votes

If you want the Service account to list or get the objects, it needs to have storage.objectReader role to it. For a reference of which IAM permissions are contained in each IAM role, see Cloud Storage IAM Roles.

Are you looking something similar to this? Once you have set up content based load balancer you can add a storage bucket to it.