From 0b3dc03f9dab781bb42b7c41ac79039a9c050e33 Mon Sep 17 00:00:00 2001
From: andusyu <andusyu@google.com>
Date: Wed, 21 Jun 2023 17:29:32 -0400
Subject: [PATCH] Do not check ssh credentials when running gcertstatus

reproxy only requires LOAS credentials for authentication. Append the
-nocheck_ssh option to gcertstatus so we don't check ssh credentials.

Test: RBE successfully started after running gcertdestroy --nodestroy_loas2
Bug: b/287297140
Change-Id: I413931b10d8e8d9ae2f8acd7ebfe37d8b3bba455
---
 ui/build/config.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ui/build/config.go b/ui/build/config.go
index d825754ef..f5bb6e19f 100644
--- a/ui/build/config.go
+++ b/ui/build/config.go
@@ -1511,7 +1511,7 @@ func (c *configImpl) GoogleProdCredsExist() bool {
 	if googleProdCredsExistCache {
 		return googleProdCredsExistCache
 	}
-	if _, err := exec.Command("/usr/bin/gcertstatus").Output(); err != nil {
+	if _, err := exec.Command("/usr/bin/gcertstatus", "-nocheck_ssh").Output(); err != nil {
 		return false
 	}
 	googleProdCredsExistCache = true