Bug in project ID Automated Google Cloud Platform Authentication (gcp-auth addon) when using end user credentials

[NixBiks]

There seems to be an issue with the gcp-auth addon when using end user credentials.

I have logged in using gcloud auth login. Then I've started minikube using minikube start --adons=gcp-auth. Then I've deployed a container that does the following

import firebase_admin
from firebase_admin.auth import verify_id_token
app = firebase_admin.initialize_app()
verify_id_token("some-token")

which leads to the following error

firebase_admin._auth_utils.InvalidIdTokenError: Firebase ID token has incorrect "aud" (audience) claim. Expected  "
dev-plx
" but got "dev-plx". Make sure the ID token comes from the same Firebase project as the service account used to authenticate this SDK. See https://firebase.google.com/docs/auth/admin/verify-id-tokens for details on how to retrieve ID token.

A bit of investigating shows that the project ID from the authentication is wrong

> print(f"Project ID: {repr(app.project_id)}")
Project ID: 'dev-plx\n'

This was originally posted in firebase_admin python SDK

Workaround

1. export GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json
2. minikube start --adons=gcp-auth

from firebase_admin import credentials, initialize_app
from firebase_admin.auth import verify_id_token

cert = credentials.Certificate("/google-app-creds.json")
app = initialize_app(cert)
verify_id_token("some-token")

[NixBiks]

I've never worked with Go but I assume this line is what needs to be fixed, i.e. the project id needs to be trimmed.