ci

.github/workflows/release.yml

@@ -21,7 +21,7 @@ jobs:
       uses: 'google-github-actions/auth@v2.1.3'
       with:
         project_id: 'probcomp-caliban'
-        workload_identity_provider: 'projects/110275315150/locations/global/workloadIdentityPools/app-engine-publishers/providers/github'
+        workload_identity_provider: 'https://iam.googleapis.com/projects/110275315150/locations/global/workloadIdentityPools/app-engine-publishers/providers/github'
         service_account: 'github-appengine-deploy@probcomp-caliban.iam.gserviceaccount.com'
     - id: 'gcloud_check'
       run: |-

README.md

@@ -23,8 +23,13 @@ Initial setup was performed as follows:
     ```
 To use in another repo, create an additional IAM entry, modifying the principal above with your desired repository name.
 
-
 ## Blocked
 
 Currently unable to deploy to app engine, probably due to this issue:
-https://github.com/firebase/firebase-admin-node/issues/1377
+https://github.com/firebase/firebase-admin-node/issues/1377
+
+gcloud iam service-accounts add-iam-policy-binding "github-appengine-deploy@probcomp-caliban.iam.gserviceaccount.com" \
+  --project="probcomp-caliban" \
+  --role="roles/iam.workloadIdentityUser" \
+  --member="principalSet://iam.googleapis.com/projects/110275315150/locations/global/workloadIdentityPools/app-engine-publishers/attribute.repository/probcomp/gae-website-test"
+