Error: both --service-token and --service-token-id are required for service token authentication about pscale-workflow-helper-scripts

[alanPaivaAsp]

Looking for previous deploy actions in this repo, i can see similar error as well
https://github.com/jonico/pscale-workflow-helper-scripts/runs/5155701822?check_suite_focus=true

[jonico]

👋 @alanPaivaAsp - thank you so much for giving the scripts in this repo a try.
I just tested the latest version of the scripts successfully creating a new deploy request here: https://github.com/planetscale-demo/devopscon-london-demo/runs/6273184049?check_suite_focus=true

I will have a deeper look into your example right now ...

[jonico]

@alanPaivaAsp: I do not have access to your environment, but my guess is that your GitHub Actions workflow gets set with all secrets and then in deploy-database-staging.sh you unset the name of the service token:

unset PLANETSCALE_SERVICE_TOKEN_NAME

With that, the web based authentication logic will kick in (as shown in your output), but as PLANETSCALE_SERVICE_TOKEN and/or PLANETSCALE_SERVICE_TOKEN_ID are still set, the planetscale CLI called in the create-deploy-request helper function is confused whether it should take the Web SSO auth credentials or the service token ones.

In order to fix, you could either
a) do not unset any service token related environment variables (and do not use web based SSO for authentication)
b) also unset (or do not even pass) PLANETSCALE_SERVICE_TOKEN and PLANETSCALE_SERVICE_TOKEN_ID so that the pscale CLI will use the credentials obtained in the web based authentication flow

Looking forward to your feedback whether this helps 😊

[jonico]

closing issue, feel free to reopen if needed