Annotating resources Error: HttpError: Bad credentials

In GitHub Enterprise Server 3.4.3 using self hosted runners.

My deployment works, pods are created and running filne, but the action fails with:

deployment "xx-api" successfully rolled out
Printing ingresses
/home/runner/actions-runner/_work/_tool/kubectl/1.24.1/x64/kubectl get ingress/ing-xxx-api -o json --insecure-skip-tls-verify --namespace ns-xxx-api
# ingres is printed here
...

Annotating resources
Error: HttpError: Bad credentials

My action looks like this:

          - name: Deploy application
            uses: Azure/k8s-deploy@v3.1
            with:
              action: deploy
              images: |
                  ${{ env.AZURE_CONTAINER_REGISTRY }}/${{ env.APP_NAME }}:${{ env.TAG }}
              namespace: ${{ env.NAMESPACE }}
              manifests: ${{ steps.bake.outputs.manifestsBundle }}

[januszj]

This could be the reason, this is Enterprise Server and self hosted runners. Or maybe missing permission ? What permission is required for this to work ?

[OliverMKing]

Are you locking down your workflow permissions to prevent the GitHub token from being passed?

https://github.com/Azure/k8s-deploy/blob/507f2d4fc713cdc92f96880e350464687ce2e960/src/strategyHelpers/deploymentHelper.ts#L136