Skip to content

Commit 2de397b

Browse files
committed
Add step to debug OIDC claims for our Google Auth
Despite our job getting credentials and relaxing our conditions, we're seeing failures when trying to upload build assets to the Google Play Console: ``` Error: google-github-actions/auth failed with: failed to generate Google Cloud federated token for //iam.googleapis.com/projects/599269050071/locations/global/workloadIdentityPools/github/providers/whatchord-repo: {"error":"unauthorized_client","error_description":"The given credential is rejected by the attribute condition."} ``` Hopefully this will shed some light on the root cause.
1 parent d462db4 commit 2de397b

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

.github/workflows/upload-build-android.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,11 @@ jobs:
108108
exit 1
109109
fi
110110
111+
- name: Debug OIDC Claims
112+
uses: steve-todorov/oidc-debugger-action@b6d83b24a379e77233fb6b26f1c1a662c4bf443c
113+
with:
114+
audience: "${{ github.server_url }}/${{ github.repository }}"
115+
111116
- id: gcp_auth
112117
name: Configure Google Cloud authentication
113118
uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093

0 commit comments

Comments
 (0)