From ce98564c26378c96e7600fb7f46a7b66620a526c Mon Sep 17 00:00:00 2001 From: Tim Diekmann Date: Sun, 31 May 2026 15:48:11 +0200 Subject: [PATCH] SRE-735: Quote AWS account IDs in deploy.yml to preserve leading zero The staging account ID 054238437032 was parsed as an integer by the YAML loader, dropping the leading zero to 54238437032. The resulting role ARN pointed at a non-existent account, so OIDC role assumption failed with "No OpenIDConnect provider found". Quoting forces string parsing. --- .github/workflows/deploy.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index af12f5d764f..6e7762443f0 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -14,8 +14,8 @@ env: TURBO_CACHE: remote:rw AWS_REGION: eu-central-1 - AWS_ECR_ACCOUNT_ID: 469596578827 - AWS_DEPLOY_ACCOUNT_ID: 054238437032 + AWS_ECR_ACCOUNT_ID: "469596578827" + AWS_DEPLOY_ACCOUNT_ID: "054238437032" OIDC_HASH_CD_PUSH_ROLE: github-oidc-hash-cd-push OIDC_HASH_CD_DEPLOY_ROLE: github-oidc-hash-cd-deploy