https://pulumi.com logo
Join Slack
Powered by
Hi, I'm having an issue trying to using pulumi/aut...
# general
d
Hi, I'm having an issue trying to using pulumi/auth-actions with GitHub. I get the following error:
Copy code
Error: Invalid response from token exchange 400: Bad Request (invalid_request: validation error: invalid token: upstream error: fetching oidc issuer signing key upstream error: invalid certificate thumprint on OIDC provider response)
When I try to go to the dashboard OIDC Issuers it returns a 404 so I can't try to recreate the issuer to try to fix
h
same here all CI pipelines down
just started happening now.
but i dont get 404 on the oidc issuer page on the dashboard, just the error on github actions.
d
Strange, yea i still get 404 trying to access the oidc issuers page. for now im just using the access token in github to at least get the ci/cd to work again
h
for anyone else, to be ready when OIDC goes down these snippets help:
Copy code
env:
      PULUMI_ACCESS_TOKEN: ${{ secrets.PULUMI_ACCESS_TOKEN }}
Copy code
- name: Authenticate Pulumi Cloud
        if: ${{ !env.PULUMI_ACCESS_TOKEN }}
        uses: pulumi/auth-actions@v1
Then simply set or delete the the secret when pulumi oidc goes up or down, no further need to change workflow
d
Resetting the thumbprints for the oidc issuer in the pulumi dashboard solved the issue
h
yes that works, thank you.
a
@delightful-winter-67113 the 404 is caused by your email not being verified. Seems that you recently set your login with username and password. Let me know if you need help with that, I believe you should have received an email with the link to verify it
oidc exchange error was caused by github performing a certificate rotation. We updated all the thumbprints to match the new certificate and we are evaluating how to handle it better. If by chance it happens with other providers, you can regenerate the thumbprints from the issuers list (click on 
...
and there is an action un the dropdown)
d
Thanks! verified email and was able to get everything working
a
awesome!
5 Views
Open in Slack
PreviousNext
Powered by