Skip to content

The manner of gh-oidc is outdated #40

@yu-iskw

Description

@yu-iskw

Issue

When I used the gh-oidc module, I got the error. I think the manner of GitHub OIDC was updated.

ERROR: gcloud crashed (OAuthError): ('Error code invalid_grant: Specified identity issuer https://token.actions.githubusercontent.com not found in the configured identity providers.', '{"error":"invalid_grant","error_description":"Specified identity issuer https://token.actions.githubusercontent.com not found in the configured identity providers."}')

Though I haven't completely understood the specification of GitHub OIDC, google_iam_workload_identity_pool_provider.oidc.issue_uri should be https://token.actions.githubusercontent.com.

https://github.com/terraform-google-modules/terraform-google-github-actions-runners/blob/v1.1.0/modules/gh-oidc/main.tf#L35-L38

  oidc {
    issuer_uri        = "https://token.actions.githubusercontent.com"
  }

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions