Group access tokens unable to launch pipelines
Summary
The new Group Access Tokens fail authentication trying to get a repository for a project where they have launched a pipeline.
Steps to reproduce
Create a Group Access Token, scope ["api"]. By default it gets Maintainer: https://docs.gitlab.com/ee/api/group_access_tokens.html#create-a-group-access-token Use that token in a request to create a new pipeline for a project in that group: https://docs.gitlab.com/ee/api/pipelines.html#create-a-new-pipeline
Example Project
https://gitlab.com/vistaprint-org/merchandising-technology/ballista/documentation
What is the current bug behavior?
The jobs in the pipeline will error with "fatal: Authentication failed ..."
What is the expected correct behavior?
Using a Personal Access Token with identical parameters (permissions/scope), the jobs can check out the repository. I would expect this to be the case for the Group Access Tokens as well.
Relevant logs and/or screenshots
Running with gitlab-runner 14.6.0 (5316d4ac)
on gitlab-runner-chicken-gitlab-runner-777c4b8889-w7dkd 5i2e1PKc
feature flags: FF_USE_LEGACY_KUBERNETES_EXECUTION_STRATEGY:true
Resolving secrets
00:00
Preparing the "kubernetes" executor
00:00
"PodAnnotations" "fluentbit.io/exclude" overwritten with "true"
Using Kubernetes namespace: default
Using Kubernetes executor with image registry.gitlab.com/vistaprint-org/merchandising-technology/ballista/components/runners/base-image:1876a4cd ...
Preparing environment
00:03
Waiting for pod default/runner-5i2e1pkc-project-21953881-concurrent-1vn68s to be running, status is Pending
ContainersNotReady: "containers with unready status: [build helper]"
ContainersNotReady: "containers with unready status: [build helper]"
Running on runner-5i2e1pkc-project-21953881-concurrent-1vn68s via gitlab-runner-chicken-gitlab-runner-777c4b8889-w7dkd...
Getting source from Git repository
00:01
Fetching changes with git depth set to 50...
Initialized empty Git repository in /builds/vistaprint-org/merchandising-technology/ballista/documentation/.git/
Created fresh repository.
remote: HTTP Basic: Access denied
fatal: Authentication failed for 'https://gitlab.com/vistaprint-org/merchandising-technology/ballista/documentation.git/'
Cleaning up project directory and file based variables
00:01
ERROR: Job failed: command terminated with exit code 1
Output of checks
This bug happens on GitLab.com