macOS CI: invalid_grant: reauth related error (rapt_required)

[medyagh]

as seen in jenkins

23:04:12 Started by upstream project "Build_Cross" build number 11000
23:04:12 originally caused by:
23:04:12  GitHub pull request #7249 of commit 2ced39c74561b3e327e11263817e3b71010ca5fa, no merge conflicts.
23:04:12 Running as SYSTEM
23:04:12 [EnvInject] - Loading node environment variables.
23:04:12 [EnvInject] - Preparing an environment for the build.
23:04:12 [EnvInject] - Keeping Jenkins system variables.
23:04:12 [EnvInject] - Keeping Jenkins build variables.
23:04:12 [EnvInject] - Evaluating the Groovy script content
23:04:12 [EnvInject] - Injecting contributions.
23:04:12 Building remotely on Mac Mini (mac-docker mac-hyperkit mac mac-vbox) in workspace /Users/jenkins/workspace
23:04:12 [WS-CLEANUP] Deleting project workspace...
23:04:12 [WS-CLEANUP] Deferred wipeout is used...
23:04:12 [WS-CLEANUP] Done
23:04:13 [workspace] $ /bin/bash -xe /var/folders/pb/1pdf6kyd1n9fw671gj2162wr0000gp/T/jenkins5073145435547192365.sh
23:04:13 + set -e
23:04:13 + echo /Users/jenkins/Downloads/google-cloud-sdk/bin:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/local/go/bin:/Users/jenkins/google-cloud-sdk/bin:/usr/local/bin:/usr/local/go/bin:/Users/jenkins/google-cloud-sdk/bin:/usr/local/bin:/usr/local/go/bin:/Users/jenkins/google-cloud-sdk/bin
23:04:13 /Users/jenkins/Downloads/google-cloud-sdk/bin:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/usr/local/go/bin:/Users/jenkins/google-cloud-sdk/bin:/usr/local/bin:/usr/local/go/bin:/Users/jenkins/google-cloud-sdk/bin:/usr/local/bin:/usr/local/go/bin:/Users/jenkins/google-cloud-sdk/bin
23:04:13 + gsutil -m cp -r gs://minikube-builds/7249/installers .
23:04:13 invalid_grant: reauth related error (rapt_required)
23:04:14 CommandException: 1 file/object could not be transferred.
23:04:14 Build step 'Execute shell' marked build as failure
23:04:14 [Google Cloud Storage Plugin] Uploading: Docker_macOS.txt
23:04:14 Finished: FAILURE

[tstromberg]

Connected in as per CI docs:

ssh -t jenkins.us-central1-a.k8s-minikube "ssh -p9000 [email protected]"

Confirmed that auth is broken:

% gsutil ls gs://minikube-builds
Reauthentication required.
Please insert your security key and press enter...

I do notice that it's using a legacy login:

dlorenc-minikube-mac:~ jenkins$ gcloud auth list
  Credentialed Accounts
ACTIVE  ACCOUNT
*       [email protected]

I'm going to create a [email protected] account with access to upload artifacts.

[tstromberg]

$ gcloud auth activate-service-account --key-file k8s-minikube-9561c01ccc43.json
Activated service account credentials for: [[email protected]]

Auth should be fixed now.

[tstromberg]

$ gsutil -m cp -r gs://minikube-builds/7249/installers .
Copying gs://minikube-builds/7249/installers/check_install_golang.sh...
/ [1/1 files][  2.2 KiB/  2.2 KiB] 100% Done                                    
Operation completed over 1 objects/2.2 KiB.