TL;DR

We often see our CI fail on this action with the seemingly ephemeral error:

Client network socket disconnected before secure TLS connection was established

Expected behavior

The action to be able to reliably authenticate with Google even in the presence of network errors.

Observed behavior

The action fails seemingly randomly.

Action YAML

Here is how we use the action: https://github.com/firezone/firezone/blob/main/.github/actions/gcp-docker-login/action.yml

It is used by many workflows, for example: https://github.com/firezone/firezone/blob/main/.github/workflows/_integration_tests.yml

Log output

https://github.com/firezone/firezone/actions/runs/15918683976/job/44901141278

Additional information

No response