eager-keyboard-30823
02/21/2023, 2:02 PMGOOGLE_CREDENTIALS
? Trying to figure out how to login to the docker registry on the deployment runner.brainy-church-78120
02/21/2023, 5:54 PMeager-keyboard-30823
02/21/2023, 10:17 PMThe fetched credentials are published as a credential configuration in theI’m unsure of what these fetched credentials actually are. Are they the path to a credentials file, are they the base64 encoded JSON credentials, or some third option?environment variable.GOOGLE_CREDENTIALS
brainy-church-78120
02/22/2023, 3:11 AMeager-keyboard-30823
02/24/2023, 2:02 PMdocker login
command. It didn’t work for GCR, but works fine for the artifact registry.Login successful
- but then pushing images fails later. 😩acoustic-lock-52416
02/24/2023, 10:31 PMm unsure of what these fetched credentials actually are. Are they the path to a credentials file, are they the base64 encoded JSON credentials, or some third option?@eager-keyboard-30823 to answer this, they are the base64 encoded JSON creds. Have any additional context on the error received from Artifact Registry on push? Rest of the deploy team is back on Monday and we will have additional brain trust if it’s a relatively obscure error
eager-keyboard-30823
02/24/2023, 10:58 PM#6 importing cache manifest from <redacted>
#6 ERROR: failed to authorize: rpc error: code = Unknown desc = failed to fetch oauth token: unexpected status: 403 Forbidden
gcloud auth print-access-token
impersonating the service account that the OIDC pool uses, logging in and pushing to docker locally works just fine.acoustic-lock-52416
02/24/2023, 11:18 PMeager-keyboard-30823
02/24/2023, 11:18 PMacoustic-lock-52416
03/02/2023, 7:26 PMeager-keyboard-30823
03/02/2023, 7:47 PMwitty-candle-66007
03/03/2023, 7:12 PMpreRunCommands: [
"# install the gcloud CLI - see: <https://cloud.google.com/sdk/docs/install>",
"echo \"$GOOGLE_CREDENTIALS\" >/google-creds.json",
"gcloud auth login --brief --cred-file=/google-creds.json",
"gcloud auth configure-docker"
"npm --prefix ./src/infra install ./src/infra",
],
eager-keyboard-30823
03/03/2023, 7:30 PMwitty-candle-66007
03/03/2023, 10:15 PM