https://pulumi.com logo
#general
Title
# general
b

brief-tailor-59531

02/02/2024, 3:23 PM
Hi all, I am using OIDC with Google Cloud, I am unsure if the whole configuration is right. I am authenticaing
pulumi
with an access token of an organization where I have an environment. The result of the command
pulumi env open dev
returns actual tokens from GCP. I want to run
pulumi preview
with the environment added to the
Pulumi.stack.yaml
but I get an error on permissions
"iam.serviceAccounts.getAccessToken"
with
pulumi config
I can see the different values from the environment with some saying
[unknow]
which I guess are unknown at that moment and eventually would be resolved (the temporary tokens). Am I right to think that my configuration of GCP is right because
pulumi env open dev
resolves the tokens?