[Fleet Monitor] combsmith/broodly — .github/workflows/ci.yml #607

Activity

1. don-petry

   added

   health-check

   dev-leadFor dev-lead agent pickupFor dev-lead agent pickup

   fleet-tracker

   on Oct 15, 2026
2. don-petry commented on Oct 15, 2026

   

   don-petry

   on Oct 15, 2026

   ContributorAuthor

   More actions

   Dev-Lead Implementation Plan

   Issue: #607 — [Fleet Monitor] combsmith/broodly — .github/workflows/ci.yml

   Root cause

   All 4 failures are the Push API Image job on push to main (runs 38622097744, 38640432809, 38644983626, 38646965219). Each fails at docker push with:

   IAM Service Account Credentials API has not been used in project 922040293304 before or it is disabled → denied: Unauthenticated request ... artifactregistry.repositories.uploadArtifacts

   Before #600, this job was "green" only because the Authenticate to Google Cloud step failed (invalid_target — WIF pool/provider missing) and continue-on-error: true skipped the push. No image has actually been pushed in the monitored window. Now that the WIF provider resolves, SA impersonation fails because iamcredentials.googleapis.com is disabled in broodly-491920.

   Scope

   This is a GCP project configuration gap, not a code defect. The repo change documents the missing API enablement prerequisite in the manual GCP setup guide; the fix itself requires a project owner to run it once.

   Required manual action (project owner)

   gcloud services enable iamcredentials.googleapis.com sts.googleapis.com iam.googleapis.com artifactregistry.googleapis.com --project=broodly-491920

   Then re-run the latest failed CI run on main.

   Implementation Checklist

   • infra/terraform/GCP_SETUP.md: add a "1.0 Enable Required APIs" step before WIF setup

   Tests to Write

   • None — documentation-only change (TDD exception). Verification is a re-run of the Push API Image job after the API is enabled.

   Test Command

   bash .dev-lead/scripts/dev-lead-lint.sh (repo lint); no code changes.
3. don-petry commented on Oct 15, 2026

   

   don-petry

   on Oct 15, 2026

   ContributorAuthor

   More actions

   Dev-Lead: Implementation Complete — PR #608

   The implementation for issue #607 is durable: commits are pushed and a pull request is open. This record is backed by verifiable artifacts you can confirm in one click.

   • Pull request: feat: implement issue #607 — [Fleet Monitor] combsmith/broodly — .github/workflows/ci.yml #608
   • Head commit: acd64b3562b78225ce43e405ca458da978f91e98
   • Net change against main: 1 file(s), +13/-0 lines
   • Run: https://github.com/combsmith/broodly/actions/runs/38732211842

   Review happens on the PR. Acceptance criteria and test results are evidenced by the PR's diff and CI checks — not asserted here. If a later stage fails, this claim is retracted in place.
4. don-petry

   added a commit that references this issue on Oct 15, 2026

   feat: implement issue #607 — [Fleet Monitor] combsmith/broodly — .git…

   ...

   4bf100d
5. don-petry

   closed this as completedin #608on Oct 15, 2026