New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[bug]: Workflow failure 'Sync Published Ceremony Branch to Main and Preprod' #1165
Comments
I think this is an expected failure in the sense that the workflow run happened in the ceremony branch where it does not have permissions on GCP (see #984). I don't know how "preprod" is meant to be deployed though: @kommendorkapten I assume you handle this one (once the client test issues are sorted)? |
@jku yes, I take a look once we are ready. We did change how this worked a while ago (but after the last signing ceremony I believe) so there may be some issues with it. |
Confirming the issue is that https://github.com/sigstore/root-signing/blob/refs/heads/ceremony/2024-03-12/.github/workflows/sync-ceremony-to-main.yml is running from a branch and trying to sync to the preprod bucket, when we don't allow workload impersonation from non-main branches. Thinking out loud, rather than syncing from a ceremony branch, when we push an update to the root metadata, we should sync the entire repository/* folder to preprod. |
#1170 should fix this. This splits the workflow into two:
Note the two other workflows, which are unchanged:
|
Workflow run failed for 'Sync Published Ceremony Branch to Main and Preprod'.
Run: https://github.com/sigstore/root-signing/actions/runs/8261650990
Workflow: https://github.com/sigstore/root-signing/blob/refs/heads/ceremony/2024-03-12/.github/workflows/sync-ceremony-to-main.yml
Workflow runs: https://github.com/sigstore/root-signing/actions/workflows/sync-ceremony-to-main.yml
Trigger: push on refs/heads/ceremony/2024-03-12
Date: 2024-03-13T08:32:12Z
The text was updated successfully, but these errors were encountered: