From 341004a02acd35d2c31805d89066da4b0dc7cb8f Mon Sep 17 00:00:00 2001
From: kmoscoe <165203920+kmoscoe@users.noreply.github.com>
Date: Wed, 31 Jul 2024 10:26:54 -0700
Subject: [PATCH] Add new troubleshooting entry for GCP 403 (#463)

* integrate custom docs with new UI

* more edits

* use website wording for intro

* fix numbering in table

* rename and some edits

* rename manage_repo file, per Bo

* Merge.

* formatting edits

* updates per Keyur's feedback

* Fix typos

* fix nav order

* fix link to API key request form

* update form link

* update key request form and output dir env var

* Revert to gerund

Though the style guide says to just use imperatives, "get started" just sounds weird. Also this is more consistent with "troubleshooting"

* new troubleshooting entry

* fix typo
---
 custom_dc/quickstart.md      | 4 ++--
 custom_dc/troubleshooting.md | 9 +++++++++
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/custom_dc/quickstart.md b/custom_dc/quickstart.md
index 5027271d7..ac05585b2 100644
--- a/custom_dc/quickstart.md
+++ b/custom_dc/quickstart.md
@@ -1,12 +1,12 @@
 ---
 layout: default
-title: Get started
+title: Getting started
 nav_order: 2
 parent: Build your own Data Commons
 ---
 
 {:.no_toc}
-# Get started
+# Getting started
 
 This page shows you how to run a local custom Data Commons instance inside a Docker container and load sample custom data from a local SQLite database. A custom Data Commons instance uses code from the public open-source repo, available at [https://github.com/datacommonsorg/](https://github.com/datacommonsorg/).
 
diff --git a/custom_dc/troubleshooting.md b/custom_dc/troubleshooting.md
index f4394341d..a56838d94 100644
--- a/custom_dc/troubleshooting.md
+++ b/custom_dc/troubleshooting.md
@@ -84,6 +84,15 @@ This is because you are missing a valid API key or the necessary APIs are not en
 
 In general, whenever you encounter problems with any Google Cloud Run service, check the **Logs** page for your Cloud Run service, to get detailed output from the services.
 
+### "403 Forbidden: Your client does not have permission to get URL / from this server"
+
+This error indicates that your application requires authenticated requests but you have not provided an authentication token. If your site is intended to be public, first check to see that the Cloud Run service is not set up to require authentication:
+1. Go to the [Google Cloud Console Cloud Run](https://console.cloud.google.com?run) page for your project.
+1. From the list of services, select the relevant service and select the **Security** tab.
+1. Ensure that you have enabled **Allow unauthenticated invocations** and restart the Cloud Run service.
+
+If you are unable to select this option, this indicates that there is an IAM permissions setup issue with your project or account. See the [Cloud Run Troubleshooting](https://cloud.google.com/run/docs/troubleshooting#unauthorized-client) for details on how to fix this.
+
 ### "502 Bad Gateway"
 
 If you see no errors in the logs, except `connect() failed (111: Connection refused) while connecting to upstream`, try the following: