Error: Fail to retrieve files src/variableGroups/lz-dev.yaml: Bad credentials about actions-variable-groups HOT 9 CLOSED

Hi @rokeno

Did you set the url property to point your instances API?

https://github.com/lindluni/actions-variable-groups/blob/main/action.yml#L15

from actions-variable-groups.

No, i did not.
I did after i posted the issue and i got:

Error: Fail to retrieve files src/variableGroups/lz-dev.yml: Not Found

...which tells me that it reached the repo, but it did not find the file.
Trying now to add ${{ github.workspace }}/src/variableGroups/lz-dev.yml to see the result

from actions-variable-groups.

You shouldn't include the workspace, it is using the contents endpoint to reach your repo file and not bringing the repo locally. Can you share a redacted copy of your the workflow step where you are using the Action?

I profess I've never tested this on GHES, I've only ever added the support. Deploying GHES myself now to test this out.

from actions-variable-groups.

Also, what scope did you give to your token?

from actions-variable-groups.

Also, what scope did you give to your token?

Full.

from actions-variable-groups.

've never tested this on GHES, I've only ever added the support. Deploying GHES myself now to test this out.

      - name: Inject variables
        uses: ./.github/actions/actions-variable-groups-main
        with:
          org: ORG
          repo: PLATFORM
          url: https://github.domain.com/api/v3
          token: ${{ secrets.AUTHENTICATION_TOKEN }}
          groups: |
            src/variableGroups/lz-dev.yml

from actions-variable-groups.

well, worked :)

Appending variable ARM_CLIENT_ID to environment
Appending variable ARM_CLIENT_SECRET to environment
Appending variable ARM_SUBSCRIPTION_ID to environment
Appending variable ARM_TENANT_ID to environment
Appending variable backendAzureRmContainerkey to environment
Appending variable backendAzureRmResourceGroupkey to environment
Appending variable backendAzureRmStorageAccountkey to environment
Appending variable billingAccount to environment
Appending variable enrollmentAccount to environment
Appending variable backendServiceArm to environment
Appending variable RBAC_ARM_CLIENT_ID to environment
Appending variable RBAC_ARM_SUBSCRIPTION_ID to environment
Appending variable TARGET_ENVIRONMENT to environment
Appending variable TF_VAR_DEPLOY_COSTLY_RESOURCE to environment

I have removed the workspace and recreated the token with full (was NOT previously).
On the token: maybe you can guide me as to what rights it needs so i don't over-power it.

from actions-variable-groups.

Hey @rokeno

Unfortunately right now I would expect you to need full repo scope with the current token model. Soon we will be releasing a new token model that will allow you to select repo:contents:read scope to tightly scope the request.

from actions-variable-groups.

Thanks alot!.
You can close this issue.

from actions-variable-groups.