Cloud Build SA needs Service Account Token Creator role
engelke opened this issue · 2 comments
engelke commented
If the Cloud Build Service Account (or any account that tries to run the Content API unit tests) does not have Service Account Token Creator role, it will not be able to fetch an id token for the test user service account.
Without that id token, none of the tests can pass.
As of the time of this issue, that role has been manually assigned, but needs to be added to the automated setup of new projects.
grayside commented
This issue does not affect our maintenance projects, but will affect anyone that sets up Emblem and seeks to explore the full test lifecycle.