Add Service Usage Consumer role to GitHub Actions service account (#6895)

aalej · web-flow · commit ccab9b78c434 · 2024-03-26T12:25:45.000-07:00
* Add Service Usage Consumer role to GitHub Actions service account

* Added a changelog entry
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1 +1,2 @@
+- Fixes issue where GitHub actions service account cannot add preview URLs to Auth authorized domains (#6895)
 - Release Firestore Emulator 1.19.4. This version fixes a minor bug with reserve ids and adds a `reset` endpoint for Datastore Mode.
diff --git a/src/gcp/resourceManager.ts b/src/gcp/resourceManager.ts
@@ -14,6 +14,7 @@ export const firebaseRoles = {
   functionsDeveloper: "roles/cloudfunctions.developer",
   hostingAdmin: "roles/firebasehosting.admin",
   runViewer: "roles/run.viewer",
+  serviceUsageConsumer: "roles/serviceusage.serviceUsageConsumer",
 };
 
 /**
diff --git a/src/init/features/hosting/github.ts b/src/init/features/hosting/github.ts
@@ -611,6 +611,10 @@ async function createServiceAccountAndKey(
     // https://github.com/firebase/firebase-tools/issues/2732
     firebaseRoles.authAdmin,
 
+    // Required to add preview URLs to Auth authorized domains
+    // https://github.com/firebase/firebase-tools/issues/6828
+    firebaseRoles.serviceUsageConsumer,
+
     // Required for CLI deploys
     firebaseRoles.apiKeysViewer,
 

Original file line number	Diff line number	Diff line change
`@@ -1 +1,2 @@`
	`1`	`+- Fixes issue where GitHub actions service account cannot add preview URLs to Auth authorized domains (#6895)`
`1`	`2`	- Release Firestore Emulator 1.19.4. This version fixes a minor bug with reserve ids and adds a `reset` endpoint for Datastore Mode.