Tests Failing in Github Action but Not Locally

[sidwarkd]

I recently pushed a simple change to my repo to find the tests were failing. I use a custom role to supplement RLS in my project. When the CI runs supabase test db I get the following failures:

psql:deployment_assets.test.sql:60: ERROR:  permission denied to set role "ota_service"
CONTEXT:  SQL statement "SELECT set_config('role', 'ota_service', true)"
PL/pgSQL function tests.authenticate_as_ota_service_role() line 3 at PERFORM
./deployment_assets.test.sql ...... 

These same tests worked last week. After digging in I see the Github Action is running
Downloaded newer image for ghcr.io/supabase/postgres:15.8.1.085

But when I test locally I get:
Downloaded newer image for public.ecr.aws/supabase/postgres:15.8.1.044

So I changed my local start command to be SUPABASE_INTERNAL_IMAGE_REGISTRY=ghcr.io pnpm supabase start and now I get
Downloaded newer image for ghcr.io/supabase/postgres:15.8.1.044

I have updated the Supabase CLI to the latest version of 2.23.4. I have several questions.

1. Why isn't the local version running the same postgres image as the Github Action environment?
2. I'm assuming my test failures are a result of the new version as nothing else in my repo has changed. What changed in the newer version to break my role-based tests?
3. Is there a way to ensure the local and CI environments are identical?

[sidwarkd]

I was able to get the Github Actions to pass by adding grant ota_service to postgres to my migrations. Previously I only had grant ota_service to authenticator which has worked for months. Obviously something in the latest version changed to break that. I'm still at a loss for why the two environments aren't the same and what could be done to ensure they are.

[sidwarkd]

This was, indeed, caused by the difference in Postgres version between my local environment and what was generated in the CI environment. This issue has context to explain what happened.

The proper fix was grant ota_service to postgres.