gcloud-cli-health-check v3.2.0: SSO reauth + config-set workaround#20
Open
msmobileapps wants to merge 1 commit into
Open
gcloud-cli-health-check v3.2.0: SSO reauth + config-set workaround#20msmobileapps wants to merge 1 commit into
msmobileapps wants to merge 1 commit into
Conversation
…stale project fixes From the 2026-04-21 Cowork+DC health check run. New lessons documented in plugins/gcloud-cli-health-check/CLAUDE.md: - opsagents.agency Workspace SSO invalidates gcloud refresh tokens on a schedule, causing silent scheduled-run failures with "Reauthentication failed. cannot prompt during non-interactive execution." - gcloud config set <property> fails when the active account's refresh token is blocked, because it tries to refresh the token on load. Workaround: temporarily switch to another credentialed account, set the property, switch back. Now standard step 9 in the SKILL.md AUTO-FIX LOOP. - msmobileapps@gmail.com has no IAM on opsagent-prod -- it only applied to the legacy opsagent-491114 project. Account architecture table fixed. - socialjetopsagent is running opsagent-core, opsagent-ai-runtime, and opsagent-dashboard Cloud Run services alongside SocialJet + MyClaimPros -- it is an active OpsAgent runtime project, not just secondary ops. SKILL.md changes: - version 1.1.0 -> 1.2.0 - All opsagent-491114 references -> opsagent-prod (14 occurrences) - New auto-fix steps 8 (SSO reauth detection) and 9 (config-set workaround) - Account Architecture Reference rewritten to reflect current truth Source: gcloud-health-check-2026-04-21.md run report.
Contributor
|
CTO review (2026-05-11): blocked on 1 failing CI check — |
6 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Auto-generated from the 2026-04-21 Cowork+DC health check run. Four new lessons surfaced; plugin updated to v3.2.0.
opsagents.agencyWorkspace invalidates refresh tokens periodically, causing silent scheduled-run failures withReauthentication failed. cannot prompt during non-interactive execution.Now step 8 in AUTO-FIX LOOP (manual fix flagged).gcloud config set <property>workaround —config settries to refresh the active account token on load, so it fails end-to-end when the primary token is blocked. Fix: switch to a working credentialed account, set the property, switch back. Now step 9 in AUTO-FIX LOOP.opsagent-491114in SKILL.md replaced withopsagent-prod(SKILL.md had drifted from the v3.0.0 CLAUDE.md).msmobileapps@gmail.comhas no IAM onopsagent-prod;socialjetopsagentis an active OpsAgent runtime project (hostsopsagent-core,opsagent-ai-runtime,opsagent-dashboard) not just SocialJet ops.Test plan
gcloud auth login michal@opsagents.agency+gcloud auth application-default login, re-run thegcloud-cli-health-checkscheduled task.opsagent-prod(no staleopsagent-491114references trigger).🤖 Generated with Claude Code running as Cowork scheduled task
gcloud-cli-health-check.