firebase/storage-resize-images fails to deploy after installation

Question

After installing firebase/storage-resize-images@0.2.6 via command line as:

firebase ext:install firebase/storage-resize-images@0.2.6

After this, I go through all the steps. As part of the logs earlier on, it shows me something like this

APIs used:
  - cloudtasks.googleapis.com: Allows the extension to enqueue Cloud Tasks.
  - storage-component.googleapis.com: Needed to use Cloud Storage
Roles granted:
  - Cloud Tasks Enqueuer: Access to create tasks.
  - Storage Admin: Grants full control of buckets and objects.

The Extension installs without errors or warnings, and I get a extensions/storage-resize-images.env file.

I then do:

firebase deploy --only extensions

Then I get this error:

Error: Some services used by this extension have not been set up on your Firebase project. To ensure this extension works as intended, you must enable these services by following the provided links, then retry this command

    * Firebase Storage: store and retrieve user-generated files like images, audio, and video without server-side code.
      https://console.firebase.google.com/project/botato-xxxxx/storage

Why is it failing? Firebase storage is already enabled and in use.

Some services used by this extension have not been set up on your Firebase project

Setup, like how?

Sometimes I'd get this error when installing in the console:

Use the details below to help resolve this error, then retry installing the extension. If you continue to get this error, we recommend uninstalling the extension to remove any extension resources that might be deployed.

; RESOURCE_ERROR at /deployments/firebase-ext-storage-resize-images/resources/backfillResizedImages: {"ResourceType":"gcp-types/cloudfunctions-v1:projects.locations.functions","ResourceErrorCode":"500","ResourceErrorMessage":"Gen1 operation for function projects/moyato-app/locations/us-central1/functions/ext-storage-resize-images-backfillResizedImages failed: Build failed: com.google.net.rpc3.client.RpcClientException: CLIENT_ERROR;google.devtools.cloudbuild.v1/ArgoAdminNoCloudAudit.CreateBuild;projects/-/serviceAccounts/117789708590500044065 can not be accessed by IAM. Please ensure it exists. If this is a new resource or recently had IAM changes, please retry in accordance with https://cloud.google.com/iam/docs/access-change-propagation.;StartTimeMs=1736889381141;unknown;ResFormat=uncompressed;NoServerTime;LogBytes=256;Non-FailFast;EndUserCredsRequested;EffSecLevel=privacy_and_integrity;ReqFormat=uncompressed;ReqID=3681076c9ede3c62;GlobalID=0;Server=[2002:a05:6600:6e44:b0:398:5dd6:162]:4001\n\tSuppressed: CriticalInputFailure: com.google.cloud.build.api.service.CreateBuildAction.produceMaybeResultWrite failed while trying to inject @com.google.cloud.build.api.service.CreateBuildAction$FromBuildBackend com.google.longrunning.Operation\n\tSuppressed: CriticalInputFailure: com.google.cloud.build.api.service.CreateBuildAction.produceFinalResult failed while trying to inject @com.google.cloud.build.api.service.CreateBuildAction$FromBuildBackend com.google.longrunning.Operation\n\tSuppressed: com.google.common.labs.concurrent.LabsFutures$LabeledExecutionException: GraphFuture{key=@com.google.cloud.build.api.service.CreateBuildAction$FinalResult com.google.longrunning.Operation} failed: com.google.net.rpc3.client.RpcClientException: CLIENT_ERROR;google.devtools.cloudbuild.v1/ArgoAdminNoCloudAudit.CreateBuild;projects/-/serviceAccounts/117789708590500044065 can not be accessed by IAM. Please ensure it exists. If this is a new resource or recently had IAM changes, please retry in accordance with https://cloud.google.com/iam/docs/access-change-propagation.;StartTimeMs=1736889381141;unknown;ResFormat=uncompressed;NoServerTime;LogBytes=256;Non-FailFast;EndUserCredsRequested;EffSecLevel=privacy_and_integrity;ReqFormat=uncompressed;ReqID=3681076c9ede3c62;GlobalID=0;Server=[2002:a05:6600:6e44:b0:398:5dd6:162]:4001\n."}; RESOURCE_ERROR at /deployments/firebase-ext-storage-resize-images/resources/generateResizedImage: {"ResourceType":"gcp-types/cloudfunctions-v1:projects.locations.functions","ResourceErrorCode":"500","ResourceErrorMessage":"Gen1 operation for function projects/moyato-app/locations/us-central1/functions/ext-storage-resize-images-generateResizedImage failed: Build failed: com.google.net.rpc3.client.RpcClientException: CLIENT_ERROR;google.devtools.cloudbuild.v1/ArgoAdminNoCloudAudit.CreateBuild;projects/-/serviceAccounts/117789708590500044065 can not be accessed by IAM. Please ensure it exists. If this is a new resource or recently had IAM changes, please retry in accordance with https://cloud.google.com/iam/docs/access-change-propagation.;StartTimeMs=1736889370463;unknown;ResFormat=uncompressed;NoServerTime;LogBytes=256;Non-FailFast;EndUserCredsRequested;EffSecLevel=privacy_and_integrity;ReqFormat=uncompressed;ReqID=7c791b5718f108c4;GlobalID=0;Server=[2002:a05:6600:6aa2:b0:394:ce89:faf2]:4001\n\tSuppressed: CriticalInputFailure: com.google.cloud.build.api.service.CreateBuildAction.produceMaybeResultWrite failed while trying to inject @com.google.cloud.build.api.service.CreateBuildAction$FromBuildBackend com.google.longrunning.Operation\n\tSuppressed: CriticalInputFailure: com.google.cloud.build.api.service.CreateBuildAction.produceFinalResult failed while trying to inject @com.google.cloud.build.api.service.CreateBuildAction$FromBuildBackend com.google.longrunning.Operation\n\tSuppressed: com.google.common.labs.concurrent.LabsFutures$LabeledExecutionException: GraphFuture{key=@com.google.cloud.build.api.service.CreateBuildAction$FinalResult com.google.longrunning.Operation} failed: com.google.net.rpc3.client.RpcClientException: CLIENT_ERROR;google.devtools.cloudbuild.v1/ArgoAdminNoCloudAudit.CreateBuild;projects/-/serviceAccounts/117789708590500044065 can not be accessed by IAM. Please ensure it exists. If this is a new resource or recently had IAM changes, please retry in accordance with https://cloud.google.com/iam/docs/access-change-propagation.;StartTimeMs=1736889370463;unknown;ResFormat=uncompressed;NoServerTime;LogBytes=256;Non-FailFast;EndUserCredsRequested;EffSecLevel=privacy_and_integrity;ReqFormat=uncompressed;ReqID=7c791b5718f108c4;GlobalID=0;Server=[2002:a05:6600:6aa2:b0:394:ce89:faf2]:4001\n."}

Why is the extension complaining about a non-enabled service when it has full access to enable anything it requires or ask to enable anything it needs? Why do I, the end user, in turn have to dig through piles of IAM policies to enable the 1 or 2 permissions?

Well, I followed the error log to the best of my understanding and enabled everything possible and yet still can't deploy extensions

What's going on? Is there a bug or something?