Do not check ssh credentials when running gcertstatus

reproxy only requires LOAS credentials for authentication. Append the
-nocheck_ssh option to gcertstatus so we don't check ssh credentials.

Test: RBE successfully started after running gcertdestroy --nodestroy_loas2
Bug: b/287297140
Change-Id: I413931b10d8e8d9ae2f8acd7ebfe37d8b3bba455
This commit is contained in:
andusyu 2023-06-21 17:29:32 -04:00
parent 98bb2768b9
commit 0b3dc03f9d

View file

@ -1511,7 +1511,7 @@ func (c *configImpl) GoogleProdCredsExist() bool {
if googleProdCredsExistCache {
return googleProdCredsExistCache
}
if _, err := exec.Command("/usr/bin/gcertstatus").Output(); err != nil {
if _, err := exec.Command("/usr/bin/gcertstatus", "-nocheck_ssh").Output(); err != nil {
return false
}
googleProdCredsExistCache = true