Started by GitHub push by ti-chi-bot[bot]Started by GitHub push by ti-chi-bot[bot]00239222392246503465031.00973597351798a8734086c24b35f9558e9403e69239493cc419caa8734086c24b35f9558e9403e69239493cc419caorigin/maina8734086c24b35f9558e9403e69239493cc419caa8734086c24b35f9558e9403e69239493cc419caorigin/maina8734086c24b35f9558e9403e69239493cc419caa8734086c24b35f9558e9403e69239493cc419caorigin/mainhttps://github.com/PingCAP-QE/ci.gitfalse#17984650349176seed #17981798falsefalse17983694165SUCCESS1782116312921https://do.pingcap.net/jenkins/job/seed/1798/default-z3gj9prow-jobs/pingcap/docs-tidb-operator/latest-postsubmits.yamlprow-jobs/pingcap/docs-cn/latest-postsubmits.yamlprow-jobs/pingcap/docs/latest-postsubmits.yamla8734086c24b35f9558e9403e69239493cc419ca1782116274000https://do.pingcap.net/jenkins/user/noreplynoreplynoreply@github.comfix(prow): add GCS service account credentials for docs PDF upload (#4712) ### Problem rclone in the docs PDF build jobs was failing to upload to GCS with: ``` Error 412: The type of authentication token used for this request requires that Uniform Bucket Level Access be enabled. ``` Root cause: rclone only set `RCLONE_CONFIG_GCS_TYPE` without specifying a credentials file, causing it to fall back to Application Default Credentials (GCE node SA OAuth token). OAuth tokens require Uniform Bucket Level Access on fine-grained ACL buckets. ### Fix Add `RCLONE_CONFIG_GCS_SERVICE_ACCOUNT_FILE="/secrets/gcs/service-account.json"` to use the mounted Prow GCS credentials secret, which has proper `storage.objectAdmin` permissions on the bucket. ### Files Changed - `prow-jobs/pingcap/docs/latest-postsubmits.yaml` - `prow-jobs/pingcap/docs-cn/latest-postsubmits.yaml` - `prow-jobs/pingcap/docs-tidb-operator/latest-postsubmits.yaml` 2026-06-22 08:17:54 +0000a8734086c24b35f9558e9403e69239493cc419cafix(prow): add GCS service account credentials for docs PDF uploadeditprow-jobs/pingcap/docs-cn/latest-postsubmits.yamleditprow-jobs/pingcap/docs/latest-postsubmits.yamleditprow-jobs/pingcap/docs-tidb-operator/latest-postsubmits.yamlgithttps://do.pingcap.net/jenkins/user/noreplynoreply