gh-ci-scale-up ERROR: A JSON web token could not be decoded

[lpossamai]

Hey,

I've got the same issue as previously reported here.

{
    "level": "WARN",
    "message": "Ignoring error: HttpError: A JSON web token could not be decoded - https://docs.github.com/rest",
    "sampling_rate": 0,
    "service": "runners-scale-up",
    "timestamp": "2025-02-19T02:05:17.258Z",
    "xray_trace_id": "",
    "region": "ap-southeast-2",
    "environment": "cicd-linux-x64-ubuntu",
    "aws-request-id": "",
    "function-name": "cicd-linux-x64-ubuntu-scale-up",
    "module": "lambda.ts"
}

I'm using the multi-runner module (latest version), and this is what I've done so far:

1. Got the module deployed + Github App (organization level)
2. Added the Webhook + secret (secret taken from SSM Parameter, couldn't find it in the output)
3. installed the app organization side with workflow-job subscription to events

Troubleshooting / what I've tried:

1. Can see the new events on GH Apps page coming in

2. In the /aws/lambda/cicd-webhook logs, I can see the webhook is working

sending message to SQS: {\"QueueUrl\":\"https://sqs.ap-southeast-2.amazonaws.com/XXXXXXXX/cicd-linux-x64-ubuntu-queued-builds

"message": "Successfully dispatched job for ploreco/PageBuilder to the queue https://sqs.ap-southeast-2.amazonaws.com/XXXXXXXX/cicd-linux-x64-ubuntu-queued-builds"

3. The output of cat app.private-key.pem | base64 is provided to the module like this:

github_app = {
    id             = var.github_app.id
    key_base64     = var.github_app.key_base64
    webhook_secret = random_id.webhook_secret.hex
  }

github_app.key_base64 is a variable that is being used as a string (for now, hopefully #4420 is implemented :))

github_app = {
  id         = "612913"
  key_base64 = "LS0tLS1CRUdK..........."
}

I'll continue to troubleshoot on my side and update this issue with further details.

Thanks!

[lpossamai]

OK, I found the issue. Maybe I'm too dumb, but the documentation states:

On the General page, make a note of the "App ID" and "Client ID" parameters.
Generate a new private key and save the app.private-key.pem file.

I didn't realized that but the private key is actually the one from Github, in the Github App:

Then, cat app.private-key.pem | base64.