-
-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Debug daily metrics GHA #167
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
!! but also I have some questions about the various auth changes. Nothing blocking, just curious why they had to be done
@@ -22,7 +22,7 @@ jobs: | |||
with: | |||
environment-file: environment.yml | |||
cache-environment: true | |||
ondarc: | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
-_- my eyes completely glazed over this during the first review
workload_identity_provider: "projects/345950277072/locations/global/workloadIdentityPools/gh-actions-pool/providers/gh-actions-provider" | ||
service_account: "pudl-usage-metrics-etl@catalyst-cooperative-pudl.iam.gserviceaccount.com" | ||
create_credentials_file: true | ||
credentials_json: "${{ secrets.GCP_USAGE_METRICS_ARCHIVER_KEY }}" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hmm, sure, but what was the issue with WIF?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This was done to give this archiver write access and to keep the ETL account as having read-only access to the archived files.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Makes sense! Do you have a new service account now? Is it in Terraform / if not, do you want help putting it in Terraform?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let me move this question into the living terraform PR (catalyst-cooperative/pudl#3841), as @bendnorman set up the account and would know better.
Overview
What problem does this address?
Fixes problems with the archiving action created in #162.
What did you change in this PR?
Testing
How did you make sure this worked? How can a reviewer verify this?
Run the
save-daily-metrics.yml
workflow and verify that it works as expected.To-do list
Tasks