damondouglas commented on issue #30527:
URL: https://github.com/apache/beam/issues/30527#issuecomment-2529926397
# Situation
`:it:google-cloud-platform:GCSPerformanceTest` repeatedly fails with error:
<details>
<summary>com.google.auth.oauth2.GoogleAuthException at
FileBasedIOLT.java</summary>
```
org.apache.beam.it.gcp.storage.FileBasedIOLT > testTextIOWriteThenRead
FAILED
java.lang.IllegalArgumentException at FileBasedIOLT.java:191
Caused by: java.lang.RuntimeException at FileBasedIOLT.java:191
Caused by: java.io.IOException at FileBasedIOLT.java:191
Caused by: com.google.auth.oauth2.GoogleAuthException at
FileBasedIOLT.java:191
Caused by:
com.google.api.client.http.HttpResponseException at FileBasedIOLT.java:191
org.apache.beam.it.gcp.storage.FileBasedIOLT > classMethod FAILED
java.lang.RuntimeException at FileBasedIOLT.java:128
Caused by: com.google.cloud.storage.StorageException at
FileBasedIOLT.java:128
Caused by: com.google.auth.oauth2.GoogleAuthException at
FileBasedIOLT.java:128
Caused by: com.google.api.client.http.HttpResponseException
at FileBasedIOLT.java:128
```
</details>
# Background
History of failures go back as far as 9 months, most recently related to an
error in GCP credentials. Notably,
[beam_PostCommit_Java_IO_Performance_Tests.yml has an authentication step using
static
credentials](https://github.com/apache/beam/blob/e1245d9da136805ab5d40710e968b472b215b6c4/.github/workflows/beam_PostCommit_Java_IO_Performance_Tests.yml#L91-L95).
Searching through the repository we see this `google-github-actions/auth@v1`
pattern [used in only a few
places](https://github.com/search?q=repo%3Aapache%2Fbeam%20google-github-actions%2Fauth%40v1&type=code)
while there are numerous tests and workflows requiring GCP authentication.
-
# Assessment
The test may be improperly configured using incorrect credentials. More
importantly, it uses an outdated pattern via static credentials to authenticate
to Google cloud.
# Recomendation
Remove the use of `google-github-actions/auth@v1`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
