Accessing a Firestore database from another Google Cloud project is achievable through proper configuration of permissions and authentication. Here's a step-by-step guide:
First, ensure that the Firestore API is enabled in both projects. This foundational step allows communication between the projects.
Next, configure IAM permissions. In the project hosting the Firestore database, grant the necessary permissions to the service account of the accessing project. Navigate to IAM & Admin > IAM in the Google Cloud Console of the Firestore project. Add the service account email of the accessing project and assign the appropriate roles, such as Cloud Datastore Viewer or Cloud Datastore User for read access, and Cloud Datastore Owner or Cloud Datastore Editor for read/write access.
Subsequently, generate a service account key in the accessing project. In the Google Cloud Console, go to IAM & Admin > Service Accounts. Locate the relevant service account, access the "Keys" tab, and create a new key in JSON format. Download this key for authentication purposes.
In your application code, use the downloaded service account key to authenticate. Here is a Python example:
import firebase_admin
from firebase_admin import credentials, firestore
# Path to the service account key file
cred = credentials.Certificate('/path/to/serviceAccountKey.json')
firebase_admin.initialize_app(cred, {
'projectId': 'other-project-id',
})
db = firestore.client()
# Example: Read from Firestore
doc_ref = db.collection('your-collection').document('your-document')
doc = doc_ref.get()
if doc.exists:
print(f'Document data: {doc.to_dict()}')
else:
print('No such document!')
# Example: Write to Firestore
doc_ref.set({
'field': 'value'
})
LinkedIn
Twitter
