Hi, I'm trying to deploy cerbos server to a cluster following your example but I'm getting this error. I just changed the repo URL, branch (it exists in remote), and subDir. I created a personal access token with repo scope

Which git protocol are you using: file, HTTPS or ssh?

https

Can you please try to check out this repo (if not already)

<https://github.com/cerbos/sample-policies.git>

message has been deleted

Oops. My bad.

I tried with this repo

Probably the pod doesn’t have access to the internet or to the git repo.

The pod have access to internet because it clone this repo

I see

My repo is private and is inside an organization

Hmm… Let me double-check this.

My repo is private and is inside an organization

Is it on GitHub?

Yeah, on GitHub

Have you tried both?

https:
  username: "my-github-username"
  password: ${GITHUB_TOKEN}

and

https:
  username: ${GITHUB_TOKEN}
  password:

yep

If you want to use a PAT to access resources owned by an organization that uses SAML SSO, you must authorize the PAT. For more information, see “About authentication with SAML single sign-on” and “Authorizing a personal access token for use with SAML single sign-on” in the GitHub Enterprise Cloud documentation.

from here https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token

I don't think so SSO is the problem

You probably running those apps locally. Have your tried to run cerbos locally as well?

They are running in the same cluster

Can you publish or DM your config (with all sensitive info removed)?

Sent

Thanks

With master branch, I get

failed to get repo HEAD: reference not found

The same issue

Does the repo URL end with

.git

?

yes

Here’s the smallest code snippet to try to reproduce the issue locally, but it requires Golang. Usage: Check out the repo, then from

./_examples/clone/auth/basic/access_token

run

go run main.go <url> <directory> <github_access_token>

go run main.go '<https://github.com/my-org/repo.git>' ./repo/ 'my-token'

It worked correctly

So the token and the git library work

Do you think the problem could be some kind of timeout because I saw the cloning took 1 minute with 20 seconds?

Possibly

Let's try it 🤞

Same repo and token as with the code snippet?

Yep, the same

Did you get the same error when you run cerbos locally?

I did not try locally, yet

Can you please try it locally?

will try it locally

If it is public, can you DM me the bucket URL?

done

Cerbos instance running locally has cloned your S3 bucket