Abacn commented on issue #31421:
URL: https://github.com/apache/beam/issues/31421#issuecomment-2146344637
root cause is `${{ secrets.GCP_SA_EMAIL }}` repo secret accidentally get
replaced to another service account that doesn't have the "service account
token creator" role needed for the test in question. We still do not understand
how this happened as Committers won't have direct access to the repo setting
unless make a request to Apache Infra.
A follow up #31483 is entered to remove the use of `${{ secrets.GCP_SA_EMAIL
}}` for most tests. There are still some workflows used this secret (to setup
google-github-actions/setup-gcloud@v0) either due to the tests not run on
self-hosted runner or have modified gcloud installation in workflow
(pre-installed gcloud CLI cannot be modified)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
