Cannot build iOS app with automatic signing

[techdaddies-kevin]

If you are looking for help, please confirm the following...

• I confirm I have searched the Docs, Codemagic Sample Projects, and GitHub Discussions.
• I confirm the software versions on my local computer match the ones in CI environment (e.g. Xcode version, Gradle version). See here
• I confirm I am able to do a fresh clone of the repository and build the project on my local computer.

Which mobile framework are you using?

Ionic/Cordova

Steps to reproduce

I have followed the tutorials (I think) but iOS builds just will not work. I get an immediate "No matching profiles found for bundle identifier "our bundle ID here" and distribution type app_store. Is something wrong with my yaml?

workflows:
  ios-workflow:
    name: iOS Workflow
    max_build_duration: 120
    instance_type: mac_mini_m2
    integrations:
      app_store_connect: CodeMagic
    environment:
      groups:
        - code_signing
      ios_signing:
        distribution_type: app_store
        bundle_identifier: {our bundle ID}
      vars:
        # Ionic Xcode worskspace and scheme
        XCODE_WORKSPACE: "App.xcworkspace"
        XCODE_SCHEME: "App"
        APP_STORE_APP_ID: {Our app store ID}
      node: v16.11.1
      ...npx build stuff here
      - name: Set up keychain to be used for code signing using Codemagic CLI 'keychain' command
        script: keychain initialize
      - name: Fetch signing files
        script: |
          app-store-connect fetch-signing-files "$BUNDLE_ID" \
          --type IOS_APP_STORE \
          --create
      - name: Set up signing certificate
        script: keychain add-certificates
      - name: Set up code signing settings on Xcode project
        script: |
          xcode-project use-profiles
          --custom-export-options='{"testFlightInternalTestingOnly": true}'
   ...other build stuff here
    publishing:
      app_store_connect:
        auth: integration 

I have uploaded the signing key to the keystore and have created a new envvar group called "code_signing" and have created a var called CERTIFICATE_PRIVATE_KEY and with the private key in the value and assigned it to that group. But still it seems codemagic is trying to use manual signing or something.

Expected results

Automatic signing to work correctly

Actual results

Automatic signing is not working

Build id (optional)

693c76ac6f8472e8cea8fd05

[dtrdic]

hello @techdaddies-kevin i see this error in the logs;
No matching profiles found for bundle identifier "app.pizzanow.demo" and distribution type "app_store"

This means that in the ios_signing section of your yaml configuration, you are referencing a provisioning profile that has not yet been uploaded to Codemagic.
In other words, you are mixing manual and automatic code signing in your yaml configuration. Since you are trying to use automatic code signing, please remove the following section from your yaml file, as it is only required for manual code signing and is not needed when using automatic signing:

      ios_signing:
        distribution_type: app_store
        bundle_identifier: app.pizzanow.demo

[techdaddies-kevin]

When I remove that, I get this error from app store connect:

app-store-connect: error: argument bundle_id_identifier: Bundle ID identifier must be specified, empty values are not allowed. For example "com.example.app".

[dtrdic]

@techdaddies-kevin that's because you are referencing an empty variable in this script

app-store-connect fetch-signing-files "$BUNDLE_ID" \
   --type IOS_APP_STORE \
    --create

Please define the missing variable in your app settings and retry the build

[techdaddies-kevin]

Thank you. It now successfully goes through the build process but it's failing to increment the version number, so the app store is rejecting the submission. The output of the increment step is:

Did not find latest build for app {my app ID}
Setting version of project App to: 
    1.

Also setting CFBundleVersion key (assuming it exists)

Updating CFBundleVersion in Info.plist(s)...

Updated CFBundleVersion in "App.xcodeproj/../App/Info.plist" to 1

But really it should be version 6 incrementing to 7.

Any thoughts? I appreciate your help thusfar.

[dtrdic]

hey @techdaddies-kevin i'm glad the above suggestions helped..
Regarding the build number incrementation.. at the moment, you’re fetching the latest App Store build number, which is different from the latest TestFlight build number.

What you actually looking for is the latest TestFlight build. Try using this command instead

cd $CM_BUILD_DIR/ios/App
LATEST_BUILD_NUMBER=$(app-store-connect get-latest-testflight-build-number "$APP_STORE_APP_ID")
agvtool new-version -all $(($LATEST_BUILD_NUMBER + 1))

Please check this for reference

[techdaddies-kevin]

I see. So does that mean that we need to have different workflows defined - One for testflight builds and one for production builds? I have spent hours digging into the codemagic documentation trying to figure this stuff out but could not find a good example of a production-ready yaml definition for android and ios deployments.

[dtrdic]

@techdaddies-kevin it’s up to you, but you can also make use of built-in environment variables like PROJECT_BUILD_NUMBER, which represents the build number for this project in Codemagic and is automatically incremented with every build.

This way, you don’t need to fetch the latest build number from App Store Connect. You can simply do this;

cd $CM_BUILD_DIR/ios/App
agvtool new-version -all $(($PROJECT_BUILD_NUMBER))

[techdaddies-kevin]

@dtrdic Can you please look at build ID 6945b9cd9ceb9b1986a80b6f for me? When I run the build, CodeMagic appears to be automatically creating a provisioning profile in App Store Connect for me. But clearly something is wrong, because it fails with a "App requires a provisioning profile. Select a provisioning profile in the Signing & Capabilities editor." Here is the relevant portion of my YAML, I think:

      - name: Set up keychain to be used for code signing using Codemagic CLI 'keychain' command
        script: keychain initialize
      - name: Fetch signing files
        script: |
          app-store-connect fetch-signing-files "$BUNDLE_ID" \
          --type IOS_APP_STORE \
          --create
      - name: Set up signing certificate
        script: keychain add-certificates
      - name: Set up code signing settings on Xcode project
        script: |
          xcode-project use-profiles
      - name: Increment build number
        script: |
          cd $CM_BUILD_DIR/ios/App
          agvtool new-version -all $(($PROJECT_BUILD_NUMBER))
      - name: Build ipa for distribution
        script: |
          cd $CM_BUILD_DIR/ios/App
          xcode-project build-ipa \
            --workspace "$XCODE_WORKSPACE" \
            --scheme "$XCODE_SCHEME"

[dtrdic]

Hi @techdaddies-kevin, Please double-check your project.pbxproj file locally. It looks like you have a different PRODUCT_BUNDLE_IDENTIFIER set for your Release configuration than the one you’re trying to archive with.

On Codemagic, you’re attempting to build with app.pizzanow.dettores-pizza, but locally it appears to be set to app.pizzanow.demo