search

pulumi / ci-mgmt

Configuration for all things CI
Apache License 2.0
10 stars 4 forks source link

Fix GCP service account #251

Closed lblackstone closed 2 years ago

lblackstone commented 2 years ago

What happened?

I disabled the travis-ci@pulumi-ci-gcp-provider.iam.gserviceaccount.com as part of cleanup, but it was apparently still in use for GCP provider CI.

Steps to reproduce

Example failing test: https://github.com/pulumi/pulumi-google-native/actions/runs/3054711811/jobs/4927543479#step:24:158

Expected Behavior

CI working

Actual Behavior

CI not working

Output of pulumi about

No response

Additional context

No response

Contributing

Vote on this issue by adding a 👍 reaction. To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

lblackstone commented 2 years ago

I'll fix this warning while I'm at it:

Warning: "service_account_key" has been deprecated. Please switch to using google-github-actions/auth which supports both Workload Identity Federation and Service Account Key JSON authentication. For more details, see https://github.com/google-github-actions/setup-gcloud#authorization
lblackstone commented 2 years ago

Related:

lblackstone commented 2 years ago

This is causing a bunch of CI jobs to fail, so marking as P0

squaremo commented 2 years ago

(Side note: this PR https://github.com/pulumi/pulumi-kubernetes-operator/pull/319 removed the use of GCP clusters for testing pulumi-kubernetes-operator; test runs have succeeded over the last couple of days, so :+1: on that front)