Add Service Usage Consumer role to GitHub Actions service account (#6895

) * Add Service Usage Consumer role to GitHub Actions service account * Added a changelog entry
firebase · Mar 26, 2024 · ccab9b7 · ccab9b7
1 parent 4c1bd42
commit ccab9b7
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1 +1,2 @@
+- Fixes issue where GitHub actions service account cannot add preview URLs to Auth authorized domains (#6895)
 - Release Firestore Emulator 1.19.4. This version fixes a minor bug with reserve ids and adds a `reset` endpoint for Datastore Mode.
diff --git a/src/gcp/resourceManager.ts b/src/gcp/resourceManager.ts
@@ -14,6 +14,7 @@ export const firebaseRoles = {
   functionsDeveloper: "roles/cloudfunctions.developer",
   hostingAdmin: "roles/firebasehosting.admin",
   runViewer: "roles/run.viewer",
+  serviceUsageConsumer: "roles/serviceusage.serviceUsageConsumer",
 };
 
 /**

diff --git a/src/init/features/hosting/github.ts b/src/init/features/hosting/github.ts
@@ -611,6 +611,10 @@ async function createServiceAccountAndKey(
     // https://github.com/firebase/firebase-tools/issues/2732
     firebaseRoles.authAdmin,
 
+    // Required to add preview URLs to Auth authorized domains
+    // https://github.com/firebase/firebase-tools/issues/6828
+    firebaseRoles.serviceUsageConsumer,
+
     // Required for CLI deploys
     firebaseRoles.apiKeysViewer,