patch

utilitywarehouse · Sep 5, 2024 · cabacb1 · cabacb1
1 parent 93349ee
commit cabacb1
Show file tree

Hide file tree

Showing 3 changed files with 26 additions and 15 deletions.
diff --git a/arc/runner/common-values.yaml b/arc/runner/common-values.yaml
@@ -14,22 +14,27 @@ containerMode:
       requests:
         storage: 5Gi
 
-# template:
-#   spec:
+template:
+  spec:
+    # https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners-with-actions-runner-controller/troubleshooting-actions-runner-controller-errors#error-access-to-the-path-homerunner_work_tool-is-denied
+    securityContext:
+      fsGroup: 123
+    containers:
+      - name: runner
+        image: ghcr.io/actions/actions-runner:latest
+        command: ["/home/runner/run.sh"]
+        env:
+            # Avoid forcing jobs to have a `container` section
+          - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
+            value: "false"
+
 #     initContainers:
 #       - name: kube-init
 #         image: ghcr.io/actions/actions-runner:latest
 #         command: ["sudo", "chown", "-R", "1001:123", "/home/runner/_work"]
 #         volumeMounts:
 #           - name: work
 #             mountPath: /home/runner/_work
-#     containers:
-#       - name: runner
-#         image: ghcr.io/actions/actions-runner:latest
-#         command: ["/home/runner/run.sh"]
-#         env:
-#           - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
-#             value: "false"
 
 controllerServiceAccount:
   namespace: sys-actions

diff --git a/arc/runner/infra-dev/generated-manifests.yaml b/arc/runner/infra-dev/generated-manifests.yaml
@@ -175,7 +175,7 @@ metadata:
     actions.github.com/scale-set-name: infra-dev
     actions.github.com/scale-set-namespace: default
   annotations:
-    actions.github.com/values-hash: bf3ad803c9308f38b00585b13984d46e8a0e37e779e3a9bbddd9cdbf3a19bba
+    actions.github.com/values-hash: a793862ec87a1d96ab260689173393ae9023f60f429aa83bc5f170e8daa2cb6
     actions.github.com/cleanup-manager-role-binding: infra-dev-gha-rs-manager
     actions.github.com/cleanup-manager-role-name: infra-dev-gha-rs-manager
     actions.github.com/cleanup-kubernetes-mode-role-binding-name: infra-dev-gha-rs-kube-mode
@@ -190,6 +190,8 @@ spec:
 
   template:
     spec:
+      securityContext: 
+        fsGroup: 123
       restartPolicy: Never
       serviceAccountName: infra-dev-gha-rs-kube-mode
       containers:
@@ -200,14 +202,15 @@ spec:
         image: 
           ghcr.io/actions/actions-runner:latest
         env:
+          - 
+            name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
+            value: "false"
           - name: ACTIONS_RUNNER_CONTAINER_HOOKS
             value: /home/runner/k8s/index.js
           - name: ACTIONS_RUNNER_POD_NAME
             valueFrom:
               fieldRef:
                 fieldPath: metadata.name
-          - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
-            value: "true"
         volumeMounts:
           - name: work
             mountPath: /home/runner/_work

diff --git a/arc/runner/infra-exp/generated-manifests.yaml b/arc/runner/infra-exp/generated-manifests.yaml
@@ -175,7 +175,7 @@ metadata:
     actions.github.com/scale-set-name: infra-exp
     actions.github.com/scale-set-namespace: default
   annotations:
-    actions.github.com/values-hash: 43f3a1cf407e973ebcf57602256dabb8f1104c4820576bc56f0db8abe4504de
+    actions.github.com/values-hash: fc7173c6e12a999064ada6542dbfd941aca92b1fbfb71bed2b65c81f4930a39
     actions.github.com/cleanup-manager-role-binding: infra-exp-gha-rs-manager
     actions.github.com/cleanup-manager-role-name: infra-exp-gha-rs-manager
     actions.github.com/cleanup-kubernetes-mode-role-binding-name: infra-exp-gha-rs-kube-mode
@@ -190,6 +190,8 @@ spec:
 
   template:
     spec:
+      securityContext: 
+        fsGroup: 123
       restartPolicy: Never
       serviceAccountName: infra-exp-gha-rs-kube-mode
       containers:
@@ -200,14 +202,15 @@ spec:
         image: 
           ghcr.io/actions/actions-runner:latest
         env:
+          - 
+            name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
+            value: "false"
           - name: ACTIONS_RUNNER_CONTAINER_HOOKS
             value: /home/runner/k8s/index.js
           - name: ACTIONS_RUNNER_POD_NAME
             valueFrom:
               fieldRef:
                 fieldPath: metadata.name
-          - name: ACTIONS_RUNNER_REQUIRE_JOB_CONTAINER
-            value: "true"
         volumeMounts:
           - name: work
             mountPath: /home/runner/_work