mirror of
https://github.com/actions/actions-runner-controller.git
synced 2026-01-19 19:07:29 +08:00
Compare commits
11 Commits
gha-runner
...
nikola-jok
| Author | SHA1 | Date | |
|---|---|---|---|
|
4f3f663603 | ||
|
|
d28d439597 | ||
|
|
69767cca51 | ||
|
|
600b45b598 | ||
|
|
a7a4eb481a | ||
|
|
0bb603edc8 | ||
|
|
9e871b42d4 | ||
|
|
26f573fa80 | ||
|
|
1ce073b56e | ||
|
|
beef400c07 | ||
|
|
20e696b6c8 |
24
charts/gha-runner-scale-set-dev/.helmignore
Normal file
24
charts/gha-runner-scale-set-dev/.helmignore
Normal file
@@ -0,0 +1,24 @@
|
|||||||
|
# Patterns to ignore when building packages.
|
||||||
|
# This supports shell glob matching, relative path matching, and
|
||||||
|
# negation (prefixed with !). Only one pattern per line.
|
||||||
|
.DS_Store
|
||||||
|
# Common VCS dirs
|
||||||
|
.git/
|
||||||
|
.gitignore
|
||||||
|
.bzr/
|
||||||
|
.bzrignore
|
||||||
|
.hg/
|
||||||
|
.hgignore
|
||||||
|
.svn/
|
||||||
|
# Common backup files
|
||||||
|
*.swp
|
||||||
|
*.bak
|
||||||
|
*.tmp
|
||||||
|
*.orig
|
||||||
|
*~
|
||||||
|
# Various IDEs
|
||||||
|
.project
|
||||||
|
.idea/
|
||||||
|
*.tmproj
|
||||||
|
.vscode/
|
||||||
|
tests/
|
||||||
33
charts/gha-runner-scale-set-dev/Chart.yaml
Normal file
33
charts/gha-runner-scale-set-dev/Chart.yaml
Normal file
@@ -0,0 +1,33 @@
|
|||||||
|
apiVersion: v2
|
||||||
|
name: gha-runner-scale-set
|
||||||
|
description: A Helm chart for deploying an AutoScalingRunnerSet
|
||||||
|
|
||||||
|
# A chart can be either an 'application' or a 'library' chart.
|
||||||
|
#
|
||||||
|
# Application charts are a collection of templates that can be packaged into versioned archives
|
||||||
|
# to be deployed.
|
||||||
|
#
|
||||||
|
# Library charts provide useful utilities or functions for the chart developer. They're included as
|
||||||
|
# a dependency of application charts to inject those utilities and functions into the rendering
|
||||||
|
# pipeline. Library charts do not define any templates and therefore cannot be deployed.
|
||||||
|
type: application
|
||||||
|
|
||||||
|
# This is the chart version. This version number should be incremented each time you make changes
|
||||||
|
# to the chart and its templates, including the app version.
|
||||||
|
# Versions are expected to follow Semantic Versioning (https://semver.org/)
|
||||||
|
version: "0.14.0"
|
||||||
|
|
||||||
|
# This is the version number of the application being deployed. This version number should be
|
||||||
|
# incremented each time you make changes to the application. Versions are not expected to
|
||||||
|
# follow Semantic Versioning. They should reflect the version the application is using.
|
||||||
|
# It is recommended to use it with quotes.
|
||||||
|
appVersion: "0.14.0"
|
||||||
|
|
||||||
|
home: https://github.com/actions/actions-runner-controller
|
||||||
|
|
||||||
|
sources:
|
||||||
|
- "https://github.com/actions/actions-runner-controller"
|
||||||
|
|
||||||
|
maintainers:
|
||||||
|
- name: actions
|
||||||
|
url: https://github.com/actions
|
||||||
168
charts/gha-runner-scale-set-dev/templates/_helpers.tpl
Normal file
168
charts/gha-runner-scale-set-dev/templates/_helpers.tpl
Normal file
@@ -0,0 +1,168 @@
|
|||||||
|
|
||||||
|
{{- define "autoscaling-runner-set.name" -}}
|
||||||
|
{{- $name := .Values.runnerScaleSetName | default .Release.Name | replace "_" "-" | trimSuffix "-" }}
|
||||||
|
{{- if or (empty $name) (gt (len $name) 45) }}
|
||||||
|
{{ fail "Autoscaling runner set name must have up to 45 characters" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- $name }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- define "autoscaling-runner-set.namespace" -}}
|
||||||
|
{{- .Values.namespaceOverride | default .Release.Namespace -}}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
The name of the manager Role.
|
||||||
|
*/}}
|
||||||
|
{{- define "manager-role.name" -}}
|
||||||
|
{{- printf "%s-manager-role" (include "autoscaling-runner-set.name" .) -}}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the labels for the manager Role.
|
||||||
|
*/}}
|
||||||
|
{{- define "manager-role.labels" -}}
|
||||||
|
{{- $resourceLabels := dict "app.kubernetes.io/component" "manager-role" -}}
|
||||||
|
{{- $commonLabels := include "gha-common-labels" . | fromYaml -}}
|
||||||
|
{{- $userLabels := include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.managerRole.metadata.labels | default (dict)) | fromYaml -}}
|
||||||
|
{{- $global := include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.all.metadata.labels | default (dict)) | fromYaml -}}
|
||||||
|
{{- toYaml (mergeOverwrite $global $userLabels $resourceLabels $commonLabels) }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the annotations for the manager Role.
|
||||||
|
|
||||||
|
Order of precedence:
|
||||||
|
1) resource.all.metadata.annotations
|
||||||
|
2) resource.managerRole.metadata.annotations
|
||||||
|
Reserved annotations are excluded from both levels.
|
||||||
|
*/}}
|
||||||
|
{{- define "manager-role.annotations" -}}
|
||||||
|
{{- $global := (include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.all.metadata.annotations | default (dict))) | fromYaml -}}
|
||||||
|
{{- $resource := (include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.managerRole.metadata.annotations | default (dict))) | fromYaml -}}
|
||||||
|
{{- $annotations := mergeOverwrite $global $resource -}}
|
||||||
|
{{- if not (empty $annotations) -}}
|
||||||
|
{{- toYaml $annotations }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
The name of the GitHub secret used for authentication.
|
||||||
|
*/}}
|
||||||
|
{{- define "github-secret.name" -}}
|
||||||
|
{{- if not (empty .Values.auth.secretName) -}}
|
||||||
|
{{- .Values.auth.secretName -}}
|
||||||
|
{{- else -}}
|
||||||
|
{{- include "autoscaling-runner-set.name" . }}-github-secret
|
||||||
|
{{- end -}}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the labels for the GitHub auth secret.
|
||||||
|
*/}}
|
||||||
|
{{- define "github-secret.labels" -}}
|
||||||
|
{{- $resourceLabels := dict "app.kubernetes.io/component" "github-secret" -}}
|
||||||
|
{{- $commonLabels := include "gha-common-labels" . | fromYaml -}}
|
||||||
|
{{- $global := include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.all.metadata.labels | default (dict)) | fromYaml -}}
|
||||||
|
{{- toYaml (mergeOverwrite $global $resourceLabels $commonLabels) }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the annotations for the GitHub auth secret.
|
||||||
|
|
||||||
|
Only global annotations are applied.
|
||||||
|
Reserved annotations are excluded.
|
||||||
|
*/}}
|
||||||
|
{{- define "github-secret.annotations" -}}
|
||||||
|
{{- $annotations := (include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.all.metadata.annotations | default (dict))) | fromYaml -}}
|
||||||
|
{{- if not (empty $annotations) -}}
|
||||||
|
{{- toYaml $annotations }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the labels for the autoscaling runner set.
|
||||||
|
*/}}
|
||||||
|
{{- define "autoscaling-runner-set.labels" -}}
|
||||||
|
{{- $resourceLabels := dict "app.kubernetes.io/component" "autoscaling-runner-set" -}}
|
||||||
|
{{- $commonLabels := include "gha-common-labels" . | fromYaml -}}
|
||||||
|
{{- $userLabels := include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.autoscalingRunnerSet.metadata.labels | default (dict)) | fromYaml -}}
|
||||||
|
{{- $global := include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.all.metadata.labels | default (dict)) | fromYaml -}}
|
||||||
|
{{- toYaml (mergeOverwrite $global $userLabels $resourceLabels $commonLabels) }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the common labels used across all resources.
|
||||||
|
*/}}
|
||||||
|
{{- define "gha-common-labels" -}}
|
||||||
|
helm.sh/chart: {{ include "gha-runner-scale-set.chart" . }}
|
||||||
|
app.kubernetes.io/name: {{ include "autoscaling-runner-set.name" . }}
|
||||||
|
app.kubernetes.io/instance: {{ include "autoscaling-runner-set.name" . }}
|
||||||
|
app.kubernetes.io/version: {{ .Chart.AppVersion }}
|
||||||
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
||||||
|
app.kubernetes.io/part-of: "gha-rs"
|
||||||
|
actions.github.com/scale-set-name: {{ include "autoscaling-runner-set.name" . }}
|
||||||
|
actions.github.com/scale-set-namespace: {{ include "autoscaling-runner-set.namespace" . }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Takes a map of user labels and removes the ones with "actions.github.com/" prefix
|
||||||
|
*/}}
|
||||||
|
{{- define "apply-non-reserved-gha-labels-and-annotations" -}}
|
||||||
|
{{- $userLabels := . -}}
|
||||||
|
{{- $processed := dict -}}
|
||||||
|
{{- range $key, $value := $userLabels -}}
|
||||||
|
{{- if not (hasPrefix "actions.github.com/" $key) -}}
|
||||||
|
{{- $_ := set $processed $key $value -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- end -}}
|
||||||
|
{{- if not (empty $processed) -}}
|
||||||
|
{{- $processed | toYaml }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create the annotations for the autoscaling runner set.
|
||||||
|
|
||||||
|
Order of precedence:
|
||||||
|
1) resource.all.metadata.annotations
|
||||||
|
2) resource.autoscalingRunnerSet.metadata.annotations
|
||||||
|
Reserved annotations are excluded from both levels.
|
||||||
|
*/}}
|
||||||
|
{{- define "autoscaling-runner-set.annotations" -}}
|
||||||
|
{{- $global := (include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.all.metadata.annotations | default (dict))) | fromYaml -}}
|
||||||
|
{{- $resource := (include "apply-non-reserved-gha-labels-and-annotations" (.Values.resource.autoscalingRunnerSet.metadata.annotations | default (dict))) | fromYaml -}}
|
||||||
|
{{- $annotations := mergeOverwrite $global $resource -}}
|
||||||
|
{{- if not (empty $annotations) -}}
|
||||||
|
{{- toYaml $annotations }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Create chart name and version as used by the chart label.
|
||||||
|
*/}}
|
||||||
|
{{- define "gha-runner-scale-set.chart" -}}
|
||||||
|
{{- printf "gha-rs-%s" .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{/*
|
||||||
|
Container spec that is expanded for the runner container
|
||||||
|
*/}}
|
||||||
|
{{- define "container-spec.runner" -}}
|
||||||
|
|
||||||
|
{{- if not .Values.runner.container }}
|
||||||
|
{{ fail "You must provide a runner container specification in values.runner.container" }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- $tlsConfig := (default (dict) .Values.githubServerTLS) -}}
|
||||||
|
name: runner
|
||||||
|
image: {{ .Values.runner.container.image | default "ghcr.io/actions/runner:latest" }}
|
||||||
|
command: {{ toJson (default (list "/home/runner/run.sh") .Values.runner.container.command) }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
@@ -0,0 +1,102 @@
|
|||||||
|
apiVersion: actions.github.com/v1alpha1
|
||||||
|
kind: AutoscalingRunnerSet
|
||||||
|
metadata:
|
||||||
|
name: {{ include "autoscaling-runner-set.name" . | quote }}
|
||||||
|
namespace: {{ include "autoscaling-runner-set.namespace" . | quote }}
|
||||||
|
labels:
|
||||||
|
{{- include "autoscaling-runner-set.labels" . | nindent 4 }}
|
||||||
|
annotations:
|
||||||
|
{{- include "autoscaling-runner-set.annotations" . | nindent 4 }}
|
||||||
|
actions.github.com/values-hash: {{ toJson .Values | sha256sum | trunc 63 }}
|
||||||
|
|
||||||
|
spec:
|
||||||
|
githubConfigUrl: {{ required ".Values.auth.url is required" (trimSuffix "/" .Values.auth.url) | quote }}
|
||||||
|
githubConfigSecret: {{ include "github-secret.name" . | quote }}
|
||||||
|
runnerGroup: {{ .Values.scaleset.runnerGroup | quote }}
|
||||||
|
runnerScaleSetName: {{ .Values.scaleset.name | quote }}
|
||||||
|
|
||||||
|
{{- if .Values.githubServerTLS }}
|
||||||
|
githubServerTLS:
|
||||||
|
{{- with .Values.githubServerTLS.certificateFrom }}
|
||||||
|
certificateFrom:
|
||||||
|
configMapKeyRef:
|
||||||
|
name: {{ .configMapKeyRef.name }}
|
||||||
|
key: {{ .configMapKeyRef.key }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if and .Values.secretResolution (ne .Values.secretResolution.type "kubernetes") }}
|
||||||
|
vaultConfig:
|
||||||
|
type: {{ .Values.secretResolution.type }}
|
||||||
|
{{- if .Values.secretResolution.proxy }}
|
||||||
|
proxy: {{- toYaml .Values.secretResolution.proxy | nindent 6 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if eq .Values.secretResolution.type "azureKeyVault" }}
|
||||||
|
azureKeyVault:
|
||||||
|
url: {{ .Values.secretResolution.azureKeyVault.url }}
|
||||||
|
tenantId: {{ .Values.secretResolution.azureKeyVault.tenantId }}
|
||||||
|
clientId: {{ .Values.secretResolution.azureKeyVault.clientId }}
|
||||||
|
certificatePath: {{ .Values.secretResolution.azureKeyVault.certificatePath }}
|
||||||
|
secretKey: {{ .Values.secretResolution.azureKeyVault.secretKey }}
|
||||||
|
{{- else }}
|
||||||
|
{{- fail (printf "Unsupported keyVault type: %s" .Values.secretResolution.type) }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if .Values.proxy }}
|
||||||
|
proxy:
|
||||||
|
{{- if .Values.proxy.http }}
|
||||||
|
http:
|
||||||
|
url: {{ .Values.proxy.http.url }}
|
||||||
|
{{- if .Values.proxy.http.credentialSecretRef }}
|
||||||
|
credentialSecretRef: {{ .Values.proxy.http.credentialSecretRef }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.proxy.https }}
|
||||||
|
https:
|
||||||
|
url: {{ .Values.proxy.https.url }}
|
||||||
|
{{- if .Values.proxy.https.credentialSecretRef }}
|
||||||
|
credentialSecretRef: {{ .Values.proxy.https.credentialSecretRef }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if and .Values.proxy.noProxy (kindIs "slice" .Values.proxy.noProxy) }}
|
||||||
|
noProxy: {{ .Values.proxy.noProxy | toYaml | nindent 6}}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if and (or (kindIs "int64" .Values.scaleset.minRunners) (kindIs "float64" .Values.scaleset.minRunners)) (or (kindIs "int64" .Values.scaleset.maxRunners) (kindIs "float64" .Values.scaleset.maxRunners)) }}
|
||||||
|
{{- if gt .Values.scaleset.minRunners .Values.scaleset.maxRunners }}
|
||||||
|
{{- fail "maxRunners has to be greater or equal to minRunners" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if or (kindIs "int64" .Values.scaleset.maxRunners) (kindIs "float64" .Values.scaleset.maxRunners)}}
|
||||||
|
{{- if lt (.Values.scaleset.maxRunners | int) 0 }}
|
||||||
|
{{- fail "maxRunners has to be greater or equal to 0" }}
|
||||||
|
{{- end }}
|
||||||
|
maxRunners: {{ .Values.scaleset.maxRunners | int }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- if or (kindIs "int64" .Values.scaleset.minRunners) (kindIs "float64" .Values.scaleset.minRunners) }}
|
||||||
|
{{- if lt (.Values.scaleset.minRunners | int) 0 }}
|
||||||
|
{{- fail "minRunners has to be greater or equal to 0" }}
|
||||||
|
{{- end }}
|
||||||
|
minRunners: {{ .Values.scaleset.minRunners | int }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- with .Values.listenerPodTemplate }}
|
||||||
|
listenerTemplate:
|
||||||
|
{{- toYaml . | nindent 4}}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- with .Values.listenerMetrics }}
|
||||||
|
listenerMetrics:
|
||||||
|
{{- toYaml . | nindent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
template:
|
||||||
|
spec:
|
||||||
|
containers:
|
||||||
|
- name: runner
|
||||||
|
image: {{ .Values.runner.container.image | default "ghcr.io/actions/actions-runner:latest" | quote }}
|
||||||
|
command: {{ toJson (default (list "/home/runner/run.sh") .Values.runner.container.command) }}
|
||||||
28
charts/gha-runner-scale-set-dev/templates/githubsecret.yaml
Normal file
28
charts/gha-runner-scale-set-dev/templates/githubsecret.yaml
Normal file
@@ -0,0 +1,28 @@
|
|||||||
|
{{- $usesKubernetesSecrets := or (not .Values.secretResolution) (eq .Values.secretResolution.type "kubernetes") -}}
|
||||||
|
|
||||||
|
{{- if and (not $usesKubernetesSecrets) (empty .Values.auth.secretName) -}}
|
||||||
|
{{- fail ".Values.auth.secretName is required when .Values.secretResolution.type is not \"kubernetes\"" -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- if and $usesKubernetesSecrets (empty .Values.auth.secretName) -}}
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ include "github-secret.name" . | quote }}
|
||||||
|
namespace: {{ include "autoscaling-runner-set.namespace" . | quote }}
|
||||||
|
labels:
|
||||||
|
{{- include "github-secret.labels" . | nindent 4 }}
|
||||||
|
annotations:
|
||||||
|
{{- include "github-secret.annotations" . | nindent 4 }}
|
||||||
|
finalizers:
|
||||||
|
- actions.github.com/cleanup-protection
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
{{- if not (empty .Values.auth.app.clientId) }}
|
||||||
|
github_app_id: {{ .Values.auth.app.clientId | toString | b64enc }}
|
||||||
|
github_app_installation_id: {{ required ".Values.auth.app.installationId is required when using GitHub App auth" .Values.auth.app.installationId | toString | b64enc }}
|
||||||
|
github_app_private_key: {{ required ".Values.auth.app.privateKey is required when using GitHub App auth" .Values.auth.app.privateKey | toString | b64enc }}
|
||||||
|
{{- else }}
|
||||||
|
github_token: {{ required ".Values.auth.githubToken is required when auth.secretName and auth.app.clientId are not set" .Values.auth.githubToken | toString | b64enc }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end -}}
|
||||||
85
charts/gha-runner-scale-set-dev/templates/manager_role.yaml
Normal file
85
charts/gha-runner-scale-set-dev/templates/manager_role.yaml
Normal file
@@ -0,0 +1,85 @@
|
|||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: Role
|
||||||
|
metadata:
|
||||||
|
name: {{ include "manager-role.name" . | quote }}
|
||||||
|
namespace: {{ include "autoscaling-runner-set.namespace" . | quote }}
|
||||||
|
labels:
|
||||||
|
{{- include "manager-role.labels" . | nindent 4 }}
|
||||||
|
annotations:
|
||||||
|
{{- include "manager-role.annotations" . | nindent 4 }}
|
||||||
|
finalizers:
|
||||||
|
- actions.github.com/cleanup-protection
|
||||||
|
rules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- pods/status
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- secrets
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- serviceaccounts
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- list
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- rbac.authorization.k8s.io
|
||||||
|
resources:
|
||||||
|
- rolebindings
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
- apiGroups:
|
||||||
|
- rbac.authorization.k8s.io
|
||||||
|
resources:
|
||||||
|
- roles
|
||||||
|
verbs:
|
||||||
|
- create
|
||||||
|
- delete
|
||||||
|
- get
|
||||||
|
- patch
|
||||||
|
- update
|
||||||
|
{{- if .Values.githubServerTLS }}
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- configmaps
|
||||||
|
verbs:
|
||||||
|
- get
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
|
{{- with .Values.resource.managerRole.extraRules }}
|
||||||
|
{{- if not (empty .) }}
|
||||||
|
{{- if not (kindIs "slice" .) -}}
|
||||||
|
{{- fail ".Values.resource.managerRole.extraRules must be a list of RBAC policy rules" -}}
|
||||||
|
{{- end }}
|
||||||
|
{{ toYaml . }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
@@ -0,0 +1,79 @@
|
|||||||
|
suite: "Test AutoscalingRunnerSet Annotations"
|
||||||
|
templates:
|
||||||
|
- autoscalingrunnserset.yaml
|
||||||
|
tests:
|
||||||
|
- it: should render values-hash annotation
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- exists:
|
||||||
|
path: metadata.annotations["actions.github.com/values-hash"]
|
||||||
|
|
||||||
|
- it: should merge global and resource annotations (resource overrides global)
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
a: "global"
|
||||||
|
shared: "global"
|
||||||
|
autoscalingRunnerSet:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
b: "resource"
|
||||||
|
shared: "resource"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.annotations.a
|
||||||
|
value: "global"
|
||||||
|
- equal:
|
||||||
|
path: metadata.annotations.b
|
||||||
|
value: "resource"
|
||||||
|
- equal:
|
||||||
|
path: metadata.annotations.shared
|
||||||
|
value: "resource"
|
||||||
|
|
||||||
|
- it: should not allow overriding reserved values-hash annotation
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
actions.github.com/values-hash: "user-value"
|
||||||
|
ok: "ok"
|
||||||
|
autoscalingRunnerSet:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
actions.github.com/cleanup-something: "should-not-render"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.annotations.ok
|
||||||
|
value: "ok"
|
||||||
|
- notEqual:
|
||||||
|
path: metadata.annotations["actions.github.com/values-hash"]
|
||||||
|
value: "user-value"
|
||||||
|
- notExists:
|
||||||
|
path: metadata.annotations["actions.github.com/cleanup-something"]
|
||||||
@@ -0,0 +1,245 @@
|
|||||||
|
suite: "Test AutoscalingRunnerSet Authentication & Configuration"
|
||||||
|
templates:
|
||||||
|
- autoscalingrunnserset.yaml
|
||||||
|
tests:
|
||||||
|
- it: should require githubConfigUrl
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- failedTemplate:
|
||||||
|
errorMessage: ".Values.auth.url is required"
|
||||||
|
|
||||||
|
- it: should render githubConfigUrl from auth.url
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.githubConfigUrl
|
||||||
|
value: "https://github.com/org"
|
||||||
|
|
||||||
|
- it: should trim trailing slash from githubConfigUrl
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org/"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.githubConfigUrl
|
||||||
|
value: "https://github.com/org"
|
||||||
|
|
||||||
|
- it: should render default githubConfigSecret from release name
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.githubConfigSecret
|
||||||
|
value: "test-name-github-secret"
|
||||||
|
|
||||||
|
- it: should render custom githubConfigSecret when auth.secretName is provided
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
auth.secretName: "custom-github-secret"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.githubConfigSecret
|
||||||
|
value: "custom-github-secret"
|
||||||
|
|
||||||
|
- it: should render default runnerGroup when not configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.runnerGroup
|
||||||
|
value: "default"
|
||||||
|
|
||||||
|
- it: should render custom runnerGroup when configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
scaleset.runnerGroup: "custom-group"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.runnerGroup
|
||||||
|
value: "custom-group"
|
||||||
|
|
||||||
|
- it: should render runnerGroup with special characters
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
scaleset.runnerGroup: "my-custom-runner-group-123"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.runnerGroup
|
||||||
|
value: "my-custom-runner-group-123"
|
||||||
|
|
||||||
|
- it: should render runnerScaleSetName from scaleset.name
|
||||||
|
set:
|
||||||
|
scaleset.name: "my-runner-set"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.runnerScaleSetName
|
||||||
|
value: "my-runner-set"
|
||||||
|
|
||||||
|
- it: should use release name as metadata name when runnerScaleSetName not provided
|
||||||
|
set:
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "release-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.name
|
||||||
|
value: "release-name"
|
||||||
|
|
||||||
|
- it: should use scaleset.name for spec.runnerScaleSetName when provided
|
||||||
|
set:
|
||||||
|
scaleset.name: "spec-runner-name"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "release-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.runnerScaleSetName
|
||||||
|
value: "spec-runner-name"
|
||||||
|
|
||||||
|
- it: should not normalize underscores in runnerScaleSetName (underscores are preserved)
|
||||||
|
set:
|
||||||
|
scaleset.name: "my_runner_set"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.runnerScaleSetName
|
||||||
|
value: "my_runner_set"
|
||||||
|
|
||||||
|
- it: should reject metadata name exceeding 45 characters
|
||||||
|
set:
|
||||||
|
runnerScaleSetName: "this-is-a-very-long-name-that-exceeds-forty-five-characters-long"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- failedTemplate:
|
||||||
|
errorMessage: "Autoscaling runner set name must have up to 45 characters"
|
||||||
|
|
||||||
|
- it: should handle githubConfigUrl with enterprise GitHub instance
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.enterprise.com/api/v3"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.githubConfigUrl
|
||||||
|
value: "https://github.enterprise.com/api/v3"
|
||||||
|
|
||||||
|
- it: should render all configuration together
|
||||||
|
set:
|
||||||
|
runnerScaleSetName: "prod-runners"
|
||||||
|
scaleset.name: "prod-spec-name"
|
||||||
|
auth.url: "https://github.com/myorg"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
auth.secretName: "gh-token-secret"
|
||||||
|
scaleset.runnerGroup: "prod-group"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "prod-scale-set"
|
||||||
|
namespace: "arc"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.githubConfigUrl
|
||||||
|
value: "https://github.com/myorg"
|
||||||
|
- equal:
|
||||||
|
path: spec.githubConfigSecret
|
||||||
|
value: "gh-token-secret"
|
||||||
|
- equal:
|
||||||
|
path: spec.runnerGroup
|
||||||
|
value: "prod-group"
|
||||||
|
- equal:
|
||||||
|
path: spec.runnerScaleSetName
|
||||||
|
value: "prod-spec-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.name
|
||||||
|
value: "prod-runners"
|
||||||
|
- equal:
|
||||||
|
path: metadata.namespace
|
||||||
|
value: "arc"
|
||||||
@@ -0,0 +1,293 @@
|
|||||||
|
suite: "Test AutoscalingRunnerSet Labels"
|
||||||
|
templates:
|
||||||
|
- autoscalingrunnserset.yaml
|
||||||
|
tests:
|
||||||
|
- it: should render base labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
chart:
|
||||||
|
appVersion: "0.14.0"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["helm.sh/chart"]
|
||||||
|
value: "gha-rs-0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/instance"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/component"]
|
||||||
|
value: "autoscaling-runner-set"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/managed-by"]
|
||||||
|
value: "Helm"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/part-of"]
|
||||||
|
value: "gha-rs"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/version"]
|
||||||
|
value: "0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-namespace"]
|
||||||
|
value: "test-namespace"
|
||||||
|
|
||||||
|
- it: should include user-defined labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
resource:
|
||||||
|
autoscalingRunnerSet:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
team: "backend"
|
||||||
|
environment: "production"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["team"]
|
||||||
|
value: "backend"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["environment"]
|
||||||
|
value: "production"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["helm.sh/chart"]
|
||||||
|
value: "gha-rs-0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/instance"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/component"]
|
||||||
|
value: "autoscaling-runner-set"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/managed-by"]
|
||||||
|
value: "Helm"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/part-of"]
|
||||||
|
value: "gha-rs"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/version"]
|
||||||
|
value: "0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-namespace"]
|
||||||
|
value: "test-namespace"
|
||||||
|
|
||||||
|
- it: should include global labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
global-team: "platform"
|
||||||
|
owner: "devops"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["global-team"]
|
||||||
|
value: "platform"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["owner"]
|
||||||
|
value: "devops"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["helm.sh/chart"]
|
||||||
|
value: "gha-rs-0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/instance"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/component"]
|
||||||
|
value: "autoscaling-runner-set"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/managed-by"]
|
||||||
|
value: "Helm"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/part-of"]
|
||||||
|
value: "gha-rs"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/version"]
|
||||||
|
value: "0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-namespace"]
|
||||||
|
value: "test-namespace"
|
||||||
|
|
||||||
|
- it: should merge both user and global labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
resource:
|
||||||
|
autoscalingRunnerSet:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
team: "backend"
|
||||||
|
environment: "staging"
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
global-team: "platform"
|
||||||
|
environment: "production"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["team"]
|
||||||
|
value: "backend"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["global-team"]
|
||||||
|
value: "platform"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["environment"]
|
||||||
|
value: "staging"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["helm.sh/chart"]
|
||||||
|
value: "gha-rs-0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/instance"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/component"]
|
||||||
|
value: "autoscaling-runner-set"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/managed-by"]
|
||||||
|
value: "Helm"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/part-of"]
|
||||||
|
value: "gha-rs"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/version"]
|
||||||
|
value: "0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-namespace"]
|
||||||
|
value: "test-namespace"
|
||||||
|
|
||||||
|
- it: should allow user labels to override global labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
resource:
|
||||||
|
autoscalingRunnerSet:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
tier: "frontend"
|
||||||
|
cost-center: "100"
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
tier: "backend"
|
||||||
|
environment: "staging"
|
||||||
|
cost-center: "200"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["tier"]
|
||||||
|
value: "frontend"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["cost-center"]
|
||||||
|
value: "100"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["environment"]
|
||||||
|
value: "staging"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/name"]
|
||||||
|
value: "test-name"
|
||||||
|
|
||||||
|
- it: should preserve actions.github.com custom labels from user config
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
resource:
|
||||||
|
autoscalingRunnerSet:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
team: "backend"
|
||||||
|
actions.github.com/custom-label: "user-value"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["team"]
|
||||||
|
value: "backend"
|
||||||
|
- notExists:
|
||||||
|
path: metadata.labels["actions.github.com/custom-label"]
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
|
||||||
|
- it: should preserve actions.github.com custom labels from global config
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
owner: "devops"
|
||||||
|
actions.github.com/global-custom: "global-value"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["owner"]
|
||||||
|
value: "devops"
|
||||||
|
- notExists:
|
||||||
|
path: metadata.labels["actions.github.com/global-custom"]
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
@@ -0,0 +1,55 @@
|
|||||||
|
suite: "Test AutoscalingRunnerSet Listener Metrics"
|
||||||
|
templates:
|
||||||
|
- autoscalingrunnserset.yaml
|
||||||
|
tests:
|
||||||
|
- it: should not render listenerMetrics when not configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- notExists:
|
||||||
|
path: spec.listenerMetrics
|
||||||
|
|
||||||
|
- it: should render listenerMetrics when configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
listenerMetrics:
|
||||||
|
counters:
|
||||||
|
gha_started_jobs_total:
|
||||||
|
labels:
|
||||||
|
- repository
|
||||||
|
- organization
|
||||||
|
histograms:
|
||||||
|
gha_job_startup_duration_seconds:
|
||||||
|
buckets:
|
||||||
|
- 0.1
|
||||||
|
- 1
|
||||||
|
- 2.5
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- exists:
|
||||||
|
path: spec.listenerMetrics
|
||||||
|
- equal:
|
||||||
|
path: spec.listenerMetrics.counters.gha_started_jobs_total.labels[0]
|
||||||
|
value: repository
|
||||||
|
- equal:
|
||||||
|
path: spec.listenerMetrics.counters.gha_started_jobs_total.labels[1]
|
||||||
|
value: organization
|
||||||
|
- contains:
|
||||||
|
path: spec.listenerMetrics.histograms.gha_job_startup_duration_seconds.buckets
|
||||||
|
content: 0.1
|
||||||
|
- contains:
|
||||||
|
path: spec.listenerMetrics.histograms.gha_job_startup_duration_seconds.buckets
|
||||||
|
content: 2.5
|
||||||
@@ -0,0 +1,71 @@
|
|||||||
|
suite: "Test AutoscalingRunnerSet MinMax Runners"
|
||||||
|
templates:
|
||||||
|
- autoscalingrunnserset.yaml
|
||||||
|
tests:
|
||||||
|
- it: should set minRunners and maxRunners correctly
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
scaleset.minRunners: 2
|
||||||
|
scaleset.maxRunners: 5
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.minRunners
|
||||||
|
value: 2
|
||||||
|
- equal:
|
||||||
|
path: spec.maxRunners
|
||||||
|
value: 5
|
||||||
|
- it: should fail when minRunners is greater than maxRunners
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
scaleset.minRunners: 6
|
||||||
|
scaleset.maxRunners: 5
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- failedTemplate: {}
|
||||||
|
- it: should work when minRunners equals maxRunners
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
scaleset.minRunners: 5
|
||||||
|
scaleset.maxRunners: 5
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.minRunners
|
||||||
|
value: 5
|
||||||
|
- equal:
|
||||||
|
path: spec.maxRunners
|
||||||
|
value: 5
|
||||||
|
- it: should not set minRunners and maxRunners when not provided
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- notExists:
|
||||||
|
path: spec.minRunners
|
||||||
|
- notExists:
|
||||||
|
path: spec.maxRunners
|
||||||
@@ -0,0 +1,290 @@
|
|||||||
|
suite: "Test AutoscalingRunnerSet Proxy Configuration"
|
||||||
|
templates:
|
||||||
|
- autoscalingrunnserset.yaml
|
||||||
|
tests:
|
||||||
|
- it: should not render proxy section when not configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy
|
||||||
|
|
||||||
|
- it: should render http proxy configuration
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
http:
|
||||||
|
url: "http://proxy.example.com:3128"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.url
|
||||||
|
value: "http://proxy.example.com:3128"
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy.https
|
||||||
|
|
||||||
|
- it: should render https proxy configuration
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
https:
|
||||||
|
url: "https://secure-proxy.example.com:3128"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.https.url
|
||||||
|
value: "https://secure-proxy.example.com:3128"
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy.http
|
||||||
|
|
||||||
|
- it: should render both http and https proxy configuration
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
http:
|
||||||
|
url: "http://proxy.example.com:3128"
|
||||||
|
https:
|
||||||
|
url: "https://secure-proxy.example.com:3128"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.url
|
||||||
|
value: "http://proxy.example.com:3128"
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.https.url
|
||||||
|
value: "https://secure-proxy.example.com:3128"
|
||||||
|
|
||||||
|
- it: should render http proxy with credential secret reference
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
http:
|
||||||
|
url: "http://proxy.example.com:3128"
|
||||||
|
credentialSecretRef: "proxy-credentials"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.url
|
||||||
|
value: "http://proxy.example.com:3128"
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.credentialSecretRef
|
||||||
|
value: "proxy-credentials"
|
||||||
|
|
||||||
|
- it: should render https proxy with credential secret reference
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
https:
|
||||||
|
url: "https://secure-proxy.example.com:3128"
|
||||||
|
credentialSecretRef: "secure-proxy-creds"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.https.url
|
||||||
|
value: "https://secure-proxy.example.com:3128"
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.https.credentialSecretRef
|
||||||
|
value: "secure-proxy-creds"
|
||||||
|
|
||||||
|
- it: should render proxy with noProxy list
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
http:
|
||||||
|
url: "http://proxy.example.com:3128"
|
||||||
|
noProxy:
|
||||||
|
- "localhost"
|
||||||
|
- "127.0.0.1"
|
||||||
|
- ".example.local"
|
||||||
|
- "10.0.0.0/8"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.url
|
||||||
|
value: "http://proxy.example.com:3128"
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: "localhost"
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: "127.0.0.1"
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: ".example.local"
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: "10.0.0.0/8"
|
||||||
|
|
||||||
|
- it: should render complete proxy configuration with all options
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
http:
|
||||||
|
url: "http://proxy.example.com:3128"
|
||||||
|
credentialSecretRef: "proxy-credentials"
|
||||||
|
https:
|
||||||
|
url: "https://secure-proxy.example.com:3128"
|
||||||
|
credentialSecretRef: "secure-proxy-creds"
|
||||||
|
noProxy:
|
||||||
|
- "localhost"
|
||||||
|
- "127.0.0.1"
|
||||||
|
- ".local"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.url
|
||||||
|
value: "http://proxy.example.com:3128"
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.credentialSecretRef
|
||||||
|
value: "proxy-credentials"
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.https.url
|
||||||
|
value: "https://secure-proxy.example.com:3128"
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.https.credentialSecretRef
|
||||||
|
value: "secure-proxy-creds"
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: "localhost"
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: "127.0.0.1"
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: ".local"
|
||||||
|
|
||||||
|
- it: should render proxy configuration with empty noProxy list
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
http:
|
||||||
|
url: "http://proxy.example.com:3128"
|
||||||
|
noProxy: []
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.url
|
||||||
|
value: "http://proxy.example.com:3128"
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
|
||||||
|
- it: should not render proxy when configured as empty object
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy: {}
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy
|
||||||
|
|
||||||
|
- it: should render proxy with only http without credentials
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
http:
|
||||||
|
url: "http://unauthenticated-proxy.example.com:8080"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.http.url
|
||||||
|
value: "http://unauthenticated-proxy.example.com:8080"
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy.http.credentialSecretRef
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy.https
|
||||||
|
|
||||||
|
- it: should render proxy with https and noProxy without http
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
proxy:
|
||||||
|
https:
|
||||||
|
url: "https://secure-proxy.example.com:3128"
|
||||||
|
noProxy:
|
||||||
|
- "internal.example.com"
|
||||||
|
- "*.local"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.proxy.https.url
|
||||||
|
value: "https://secure-proxy.example.com:3128"
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy.http
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: "internal.example.com"
|
||||||
|
- contains:
|
||||||
|
path: spec.proxy.noProxy
|
||||||
|
content: "*.local"
|
||||||
@@ -0,0 +1,110 @@
|
|||||||
|
suite: "Test AutoscalingRunnerSet Vault Config"
|
||||||
|
templates:
|
||||||
|
- autoscalingrunnserset.yaml
|
||||||
|
tests:
|
||||||
|
- it: should not render vaultConfig when secretResolution.type is kubernetes
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
secretResolution:
|
||||||
|
type: kubernetes
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- notExists:
|
||||||
|
path: spec.vaultConfig
|
||||||
|
|
||||||
|
- it: should render azureKeyVault vaultConfig when configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
secretResolution:
|
||||||
|
type: azureKeyVault
|
||||||
|
azureKeyVault:
|
||||||
|
url: "https://myvault.vault.azure.net"
|
||||||
|
tenantId: "tenant-123"
|
||||||
|
clientId: "client-456"
|
||||||
|
certificatePath: "/etc/certs/akv.pem"
|
||||||
|
secretKey: "secret-key-name"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.vaultConfig.type
|
||||||
|
value: azureKeyVault
|
||||||
|
- equal:
|
||||||
|
path: spec.vaultConfig.azureKeyVault.url
|
||||||
|
value: "https://myvault.vault.azure.net"
|
||||||
|
- equal:
|
||||||
|
path: spec.vaultConfig.azureKeyVault.tenantId
|
||||||
|
value: "tenant-123"
|
||||||
|
- equal:
|
||||||
|
path: spec.vaultConfig.azureKeyVault.clientId
|
||||||
|
value: "client-456"
|
||||||
|
- equal:
|
||||||
|
path: spec.vaultConfig.azureKeyVault.certificatePath
|
||||||
|
value: "/etc/certs/akv.pem"
|
||||||
|
- equal:
|
||||||
|
path: spec.vaultConfig.azureKeyVault.secretKey
|
||||||
|
value: "secret-key-name"
|
||||||
|
|
||||||
|
- it: should render vaultConfig proxy when configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
secretResolution:
|
||||||
|
type: azureKeyVault
|
||||||
|
proxy:
|
||||||
|
http:
|
||||||
|
url: "http://proxy.example.com:3128"
|
||||||
|
credentialSecretRef: "proxy-credentials"
|
||||||
|
noProxy:
|
||||||
|
- "localhost"
|
||||||
|
azureKeyVault:
|
||||||
|
url: "https://myvault.vault.azure.net"
|
||||||
|
tenantId: "tenant-123"
|
||||||
|
clientId: "client-456"
|
||||||
|
certificatePath: "/etc/certs/akv.pem"
|
||||||
|
secretKey: "secret-key-name"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: spec.vaultConfig.proxy.http.url
|
||||||
|
value: "http://proxy.example.com:3128"
|
||||||
|
- equal:
|
||||||
|
path: spec.vaultConfig.proxy.http.credentialSecretRef
|
||||||
|
value: "proxy-credentials"
|
||||||
|
- contains:
|
||||||
|
path: spec.vaultConfig.proxy.noProxy
|
||||||
|
content: "localhost"
|
||||||
|
- notExists:
|
||||||
|
path: spec.proxy
|
||||||
|
|
||||||
|
- it: should fail for unsupported secretResolution.type
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
controllerServiceAccount.name: "arc"
|
||||||
|
controllerServiceAccount.namespace: "arc-system"
|
||||||
|
secretResolution:
|
||||||
|
type: "hashicorpVault"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- failedTemplate:
|
||||||
|
errorMessage: "Unsupported keyVault type: hashicorpVault"
|
||||||
@@ -0,0 +1,49 @@
|
|||||||
|
suite: "Test GitHub Secret Annotations"
|
||||||
|
templates:
|
||||||
|
- githubsecret.yaml
|
||||||
|
tests:
|
||||||
|
- it: should include global annotations
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
a: "global"
|
||||||
|
shared: "global"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.annotations.a
|
||||||
|
value: "global"
|
||||||
|
- equal:
|
||||||
|
path: metadata.annotations.shared
|
||||||
|
value: "global"
|
||||||
|
|
||||||
|
- it: should drop actions.github.com annotations from global config
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
ok: "ok"
|
||||||
|
actions.github.com/values-hash: "user-value"
|
||||||
|
actions.github.com/cleanup-something: "should-not-render"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.annotations.ok
|
||||||
|
value: "ok"
|
||||||
|
- notExists:
|
||||||
|
path: metadata.annotations["actions.github.com/values-hash"]
|
||||||
|
- notExists:
|
||||||
|
path: metadata.annotations["actions.github.com/cleanup-something"]
|
||||||
@@ -0,0 +1,70 @@
|
|||||||
|
suite: "Test GitHub Secret Data"
|
||||||
|
templates:
|
||||||
|
- githubsecret.yaml
|
||||||
|
tests:
|
||||||
|
- it: should render PAT token when configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- exists:
|
||||||
|
path: data.github_token
|
||||||
|
- equal:
|
||||||
|
path: data.github_token
|
||||||
|
value: "Z2hfdG9rZW4xMjM0NQ=="
|
||||||
|
- notExists:
|
||||||
|
path: data.github_app_id
|
||||||
|
- notExists:
|
||||||
|
path: data.github_app_installation_id
|
||||||
|
- notExists:
|
||||||
|
path: data.github_app_private_key
|
||||||
|
|
||||||
|
- it: should render GitHub App keys when app is configured
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.app:
|
||||||
|
clientId: "123"
|
||||||
|
installationId: "456"
|
||||||
|
privateKey: "mykey"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- notExists:
|
||||||
|
path: data.github_token
|
||||||
|
- equal:
|
||||||
|
path: data.github_app_id
|
||||||
|
value: "MTIz"
|
||||||
|
- equal:
|
||||||
|
path: data.github_app_installation_id
|
||||||
|
value: "NDU2"
|
||||||
|
- equal:
|
||||||
|
path: data.github_app_private_key
|
||||||
|
value: "bXlrZXk="
|
||||||
|
|
||||||
|
- it: should fail if app is configured without installationId
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.app:
|
||||||
|
clientId: "123"
|
||||||
|
privateKey: "mykey"
|
||||||
|
asserts:
|
||||||
|
- failedTemplate:
|
||||||
|
errorMessage: ".Values.auth.app.installationId is required when using GitHub App auth"
|
||||||
|
|
||||||
|
- it: should fail if app is configured without privateKey
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.app:
|
||||||
|
clientId: "123"
|
||||||
|
installationId: "456"
|
||||||
|
asserts:
|
||||||
|
- failedTemplate:
|
||||||
|
errorMessage: ".Values.auth.app.privateKey is required when using GitHub App auth"
|
||||||
@@ -0,0 +1,129 @@
|
|||||||
|
suite: "Test GitHub Secret Labels"
|
||||||
|
templates:
|
||||||
|
- githubsecret.yaml
|
||||||
|
tests:
|
||||||
|
- it: should render base labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
chart:
|
||||||
|
appVersion: "0.14.0"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["helm.sh/chart"]
|
||||||
|
value: "gha-rs-0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/instance"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/component"]
|
||||||
|
value: "github-secret"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/managed-by"]
|
||||||
|
value: "Helm"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/part-of"]
|
||||||
|
value: "gha-rs"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/version"]
|
||||||
|
value: "0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-namespace"]
|
||||||
|
value: "test-namespace"
|
||||||
|
|
||||||
|
- it: should include global labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
global-team: "platform"
|
||||||
|
owner: "devops"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["global-team"]
|
||||||
|
value: "platform"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["owner"]
|
||||||
|
value: "devops"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/component"]
|
||||||
|
value: "github-secret"
|
||||||
|
|
||||||
|
- it: should drop actions.github.com custom labels from global config
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
owner: "devops"
|
||||||
|
actions.github.com/global-custom: "global-value"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["owner"]
|
||||||
|
value: "devops"
|
||||||
|
- notExists:
|
||||||
|
path: metadata.labels["actions.github.com/global-custom"]
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
|
||||||
|
- it: should not allow global labels to override reserved labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_token12345"
|
||||||
|
resource:
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
helm.sh/chart: "bad"
|
||||||
|
app.kubernetes.io/name: "bad"
|
||||||
|
app.kubernetes.io/instance: "bad"
|
||||||
|
app.kubernetes.io/component: "bad"
|
||||||
|
actions.github.com/scale-set-name: "bad"
|
||||||
|
actions.github.com/scale-set-namespace: "bad"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["helm.sh/chart"]
|
||||||
|
value: "gha-rs-0.14.0"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/instance"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/component"]
|
||||||
|
value: "github-secret"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-namespace"]
|
||||||
|
value: "test-namespace"
|
||||||
@@ -0,0 +1,76 @@
|
|||||||
|
suite: "Test Manager Role Extra Rules"
|
||||||
|
templates:
|
||||||
|
- manager_role.yaml
|
||||||
|
tests:
|
||||||
|
- it: should render base role metadata
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
chart:
|
||||||
|
appVersion: "0.14.0"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: apiVersion
|
||||||
|
value: "rbac.authorization.k8s.io/v1"
|
||||||
|
- equal:
|
||||||
|
path: kind
|
||||||
|
value: "Role"
|
||||||
|
- equal:
|
||||||
|
path: metadata.name
|
||||||
|
value: "test-name-manager-role"
|
||||||
|
- equal:
|
||||||
|
path: metadata.namespace
|
||||||
|
value: "test-namespace"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["app.kubernetes.io/component"]
|
||||||
|
value: "manager-role"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-name"]
|
||||||
|
value: "test-name"
|
||||||
|
- equal:
|
||||||
|
path: metadata.labels["actions.github.com/scale-set-namespace"]
|
||||||
|
value: "test-namespace"
|
||||||
|
- equal:
|
||||||
|
path: metadata.finalizers[0]
|
||||||
|
value: "actions.github.com/cleanup-protection"
|
||||||
|
|
||||||
|
- it: should append extra RBAC policy rules
|
||||||
|
set:
|
||||||
|
resource:
|
||||||
|
managerRole:
|
||||||
|
extraRules:
|
||||||
|
- apiGroups:
|
||||||
|
- ""
|
||||||
|
resources:
|
||||||
|
- "events"
|
||||||
|
verbs:
|
||||||
|
- "create"
|
||||||
|
- "patch"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- equal:
|
||||||
|
path: rules[6].apiGroups[0]
|
||||||
|
value: ""
|
||||||
|
- equal:
|
||||||
|
path: rules[6].resources[0]
|
||||||
|
value: "events"
|
||||||
|
- equal:
|
||||||
|
path: rules[6].verbs[0]
|
||||||
|
value: "create"
|
||||||
|
- equal:
|
||||||
|
path: rules[6].verbs[1]
|
||||||
|
value: "patch"
|
||||||
|
|
||||||
|
- it: should fail when extraRules is not a list
|
||||||
|
set:
|
||||||
|
resource:
|
||||||
|
managerRole:
|
||||||
|
extraRules: "not-a-list"
|
||||||
|
release:
|
||||||
|
name: "test-name"
|
||||||
|
namespace: "test-namespace"
|
||||||
|
asserts:
|
||||||
|
- failedTemplate:
|
||||||
|
errorMessage: ".Values.resource.managerRole.extraRules must be a list of RBAC policy rules"
|
||||||
318
charts/gha-runner-scale-set-dev/values.yaml
Normal file
318
charts/gha-runner-scale-set-dev/values.yaml
Normal file
@@ -0,0 +1,318 @@
|
|||||||
|
## By default .Release.namespace is used
|
||||||
|
namespaceOverride: ""
|
||||||
|
|
||||||
|
scaleset:
|
||||||
|
# Name of the scaleset
|
||||||
|
name: ""
|
||||||
|
runnerGroup: "default"
|
||||||
|
## minRunners is the min number of idle runners. The target number of runners created will be
|
||||||
|
## calculated as a sum of minRunners and the number of jobs assigned to the scale set.
|
||||||
|
# minRunners: 0
|
||||||
|
## maxRunners is the max number of runners the autoscaling runner set will scale up to.
|
||||||
|
# maxRunners: 5
|
||||||
|
|
||||||
|
# Auth object provides authorization parameters.
|
||||||
|
# You should apply either:
|
||||||
|
# 1) secretName referencing the secret containing authorization parameters in the same namespace where the scale set is being installed in
|
||||||
|
# 2) app object parameters
|
||||||
|
# 3) github_tokne
|
||||||
|
#
|
||||||
|
# If multiple of them are set, only single one will be applied based on the above mentioned order.
|
||||||
|
auth:
|
||||||
|
url: "" # Required
|
||||||
|
githubToken: ""
|
||||||
|
secretName: ""
|
||||||
|
app:
|
||||||
|
clientId: ""
|
||||||
|
installationId: ""
|
||||||
|
privateKey: ""
|
||||||
|
|
||||||
|
# secretResolution configures how secrets are resolved for this scale set.
|
||||||
|
# By default, secrets are resolved using Kubernetes secrets. When Kubernetes
|
||||||
|
# secrets are used, no proxy config will be applied.
|
||||||
|
#
|
||||||
|
# If you decide to use secret integrations with vaults, you can configure
|
||||||
|
# proxy settings for the vault communication here.
|
||||||
|
secretResolution:
|
||||||
|
# Name of the secret resolver to use.
|
||||||
|
# Available values:
|
||||||
|
# - "kubernetes" - use Kubernetes secrets
|
||||||
|
# - "azureKeyVault" - use Azure Key Vault
|
||||||
|
type: "kubernetes"
|
||||||
|
|
||||||
|
## Proxy settings when type is NOT "kubernetes"
|
||||||
|
# proxy:
|
||||||
|
# http:
|
||||||
|
# url: http://proxy.com:1234
|
||||||
|
# credentialSecretRef: proxy-auth # a secret with `username` and `password` keys
|
||||||
|
# https:
|
||||||
|
# url: http://proxy.com:1234
|
||||||
|
# credentialSecretRef: proxy-auth # a secret with `username` and `password` keys
|
||||||
|
# noProxy:
|
||||||
|
# - example.com
|
||||||
|
# - example.org
|
||||||
|
|
||||||
|
## Configuration for Azure Key Vault integration
|
||||||
|
# azureKeyVault:
|
||||||
|
# url: ""
|
||||||
|
# client_id: ""
|
||||||
|
# tenant_id: ""
|
||||||
|
# certificate_path: ""
|
||||||
|
|
||||||
|
## Proxy can be used to define proxy settings that will be used by the
|
||||||
|
## controller, the listener and the runner of this scale set.
|
||||||
|
# proxy:
|
||||||
|
# http:
|
||||||
|
# url: http://proxy.com:1234
|
||||||
|
# credentialSecretRef: proxy-auth # a secret with `username` and `password` keys
|
||||||
|
# https:
|
||||||
|
# url: http://proxy.com:1234
|
||||||
|
# credentialSecretRef: proxy-auth # a secret with `username` and `password` keys
|
||||||
|
# noProxy:
|
||||||
|
# - example.com
|
||||||
|
# - example.org
|
||||||
|
|
||||||
|
## listenerTemplate is the PodSpec for each listener Pod
|
||||||
|
## For reference: https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#PodSpec
|
||||||
|
# listenerPodTemplate:
|
||||||
|
# spec:
|
||||||
|
# containers:
|
||||||
|
# # Use this section to append additional configuration to the listener container.
|
||||||
|
# # If you change the name of the container, the configuration will not be applied to the listener,
|
||||||
|
# # and it will be treated as a side-car container.
|
||||||
|
# - name: listener
|
||||||
|
# securityContext:
|
||||||
|
# runAsUser: 1000
|
||||||
|
# # Use this section to add the configuration of a side-car container.
|
||||||
|
# # Comment it out or remove it if you don't need it.
|
||||||
|
# # Spec for this container will be applied as is without any modifications.
|
||||||
|
# - name: side-car
|
||||||
|
# image: example-sidecar
|
||||||
|
|
||||||
|
## Resource object allows modifying resources created by the chart itself
|
||||||
|
resource:
|
||||||
|
# Specifies metadata that will be applied to all resources managed by ARC
|
||||||
|
all:
|
||||||
|
metadata:
|
||||||
|
labels: {}
|
||||||
|
annotations: {}
|
||||||
|
|
||||||
|
# Specifies metadata that will be applied to the AutoscalingRunnerSet resource
|
||||||
|
autoscalingRunnerSet:
|
||||||
|
metadata:
|
||||||
|
labels: {}
|
||||||
|
annotations: {}
|
||||||
|
|
||||||
|
# Specifies metadata that will be applied to the manager Role resource
|
||||||
|
managerRole:
|
||||||
|
metadata:
|
||||||
|
labels: {}
|
||||||
|
annotations: {}
|
||||||
|
extraRules: []
|
||||||
|
|
||||||
|
# TODO: Add more resource customizations when needed
|
||||||
|
|
||||||
|
# Template applied for the runner container
|
||||||
|
runner:
|
||||||
|
# metadata:
|
||||||
|
# labels: []
|
||||||
|
# annotations: []
|
||||||
|
|
||||||
|
# Mode can be used to automatically add required configuration for the selected mode
|
||||||
|
mode: "" # Available modes: "", "kubernetes", "dind"
|
||||||
|
|
||||||
|
# container field is applied to the container named "runner". You cannot override the name of the runner container
|
||||||
|
container:
|
||||||
|
image: "ghcr.io/actions/actions-runner:latest"
|
||||||
|
command: ["/home/runner/run.sh"]
|
||||||
|
|
||||||
|
dind:
|
||||||
|
# If default is set to true, we will expand the default spec for the `dind` container, and you can provide fields to override them
|
||||||
|
default: true
|
||||||
|
|
||||||
|
kubernetesMode:
|
||||||
|
default: true
|
||||||
|
serviceAccountName: ""
|
||||||
|
extraPermissions: []
|
||||||
|
extension: {}
|
||||||
|
## A self-signed CA certificate for communication with the GitHub server can be
|
||||||
|
## provided using a config map key selector. If `runnerMountPath` is set, for
|
||||||
|
## each runner pod ARC will:
|
||||||
|
## - create a `github-server-tls-cert` volume containing the certificate
|
||||||
|
## specified in `certificateFrom`
|
||||||
|
## - mount that volume on path `runnerMountPath`/{certificate name}
|
||||||
|
## - set NODE_EXTRA_CA_CERTS environment variable to that same path
|
||||||
|
## - set RUNNER_UPDATE_CA_CERTS environment variable to "1" (as of version
|
||||||
|
## 2.303.0 this will instruct the runner to reload certificates on the host)
|
||||||
|
##
|
||||||
|
## If any of the above had already been set by the user in the runner pod
|
||||||
|
## template, ARC will observe those and not overwrite them.
|
||||||
|
## Example configuration:
|
||||||
|
#
|
||||||
|
# githubServerTLS:
|
||||||
|
# certificateFrom:
|
||||||
|
# configMapKeyRef:
|
||||||
|
# name: config-map-name
|
||||||
|
# key: ca.crt
|
||||||
|
# runnerMountPath: /usr/local/share/ca-certificates/
|
||||||
|
|
||||||
|
## controllerServiceAccount is the service account of the controller
|
||||||
|
controllerServiceAccount:
|
||||||
|
namespace: ""
|
||||||
|
name: ""
|
||||||
|
|
||||||
|
## listenerMetrics are configurable metrics applied to the listener.
|
||||||
|
## In order to avoid helm merging these fields, we left the metrics commented out.
|
||||||
|
## When configuring metrics, please uncomment the listenerMetrics object below.
|
||||||
|
## You can modify the configuration to remove the label or specify custom buckets for histogram.
|
||||||
|
##
|
||||||
|
## If the buckets field is not specified, the default buckets will be applied. Default buckets are
|
||||||
|
## provided here for documentation purposes
|
||||||
|
# listenerMetrics:
|
||||||
|
# counters:
|
||||||
|
# gha_started_jobs_total:
|
||||||
|
# labels:
|
||||||
|
# ["repository", "organization", "enterprise", "job_name", "event_name", "job_workflow_ref", "job_workflow_name", "job_workflow_target"]
|
||||||
|
# gha_completed_jobs_total:
|
||||||
|
# labels:
|
||||||
|
# [
|
||||||
|
# "repository",
|
||||||
|
# "organization",
|
||||||
|
# "enterprise",
|
||||||
|
# "job_name",
|
||||||
|
# "event_name",
|
||||||
|
# "job_result",
|
||||||
|
# "job_workflow_ref",
|
||||||
|
# "job_workflow_name",
|
||||||
|
# "job_workflow_target",
|
||||||
|
# ]
|
||||||
|
# gauges:
|
||||||
|
# gha_assigned_jobs:
|
||||||
|
# labels: ["name", "namespace", "repository", "organization", "enterprise"]
|
||||||
|
# gha_running_jobs:
|
||||||
|
# labels: ["name", "namespace", "repository", "organization", "enterprise"]
|
||||||
|
# gha_registered_runners:
|
||||||
|
# labels: ["name", "namespace", "repository", "organization", "enterprise"]
|
||||||
|
# gha_busy_runners:
|
||||||
|
# labels: ["name", "namespace", "repository", "organization", "enterprise"]
|
||||||
|
# gha_min_runners:
|
||||||
|
# labels: ["name", "namespace", "repository", "organization", "enterprise"]
|
||||||
|
# gha_max_runners:
|
||||||
|
# labels: ["name", "namespace", "repository", "organization", "enterprise"]
|
||||||
|
# gha_desired_runners:
|
||||||
|
# labels: ["name", "namespace", "repository", "organization", "enterprise"]
|
||||||
|
# gha_idle_runners:
|
||||||
|
# labels: ["name", "namespace", "repository", "organization", "enterprise"]
|
||||||
|
# histograms:
|
||||||
|
# gha_job_startup_duration_seconds:
|
||||||
|
# labels:
|
||||||
|
# ["repository", "organization", "enterprise", "job_name", "event_name","job_workflow_ref", "job_workflow_name", "job_workflow_target"]
|
||||||
|
# buckets:
|
||||||
|
# [
|
||||||
|
# 0.01,
|
||||||
|
# 0.05,
|
||||||
|
# 0.1,
|
||||||
|
# 0.5,
|
||||||
|
# 1.0,
|
||||||
|
# 2.0,
|
||||||
|
# 3.0,
|
||||||
|
# 4.0,
|
||||||
|
# 5.0,
|
||||||
|
# 6.0,
|
||||||
|
# 7.0,
|
||||||
|
# 8.0,
|
||||||
|
# 9.0,
|
||||||
|
# 10.0,
|
||||||
|
# 12.0,
|
||||||
|
# 15.0,
|
||||||
|
# 18.0,
|
||||||
|
# 20.0,
|
||||||
|
# 25.0,
|
||||||
|
# 30.0,
|
||||||
|
# 40.0,
|
||||||
|
# 50.0,
|
||||||
|
# 60.0,
|
||||||
|
# 70.0,
|
||||||
|
# 80.0,
|
||||||
|
# 90.0,
|
||||||
|
# 100.0,
|
||||||
|
# 110.0,
|
||||||
|
# 120.0,
|
||||||
|
# 150.0,
|
||||||
|
# 180.0,
|
||||||
|
# 210.0,
|
||||||
|
# 240.0,
|
||||||
|
# 300.0,
|
||||||
|
# 360.0,
|
||||||
|
# 420.0,
|
||||||
|
# 480.0,
|
||||||
|
# 540.0,
|
||||||
|
# 600.0,
|
||||||
|
# 900.0,
|
||||||
|
# 1200.0,
|
||||||
|
# 1800.0,
|
||||||
|
# 2400.0,
|
||||||
|
# 3000.0,
|
||||||
|
# 3600.0,
|
||||||
|
# ]
|
||||||
|
# gha_job_execution_duration_seconds:
|
||||||
|
# labels:
|
||||||
|
# [
|
||||||
|
# "repository",
|
||||||
|
# "organization",
|
||||||
|
# "enterprise",
|
||||||
|
# "job_name",
|
||||||
|
# "event_name",
|
||||||
|
# "job_result",
|
||||||
|
# "job_workflow_ref",
|
||||||
|
# "job_workflow_name",
|
||||||
|
# "job_workflow_target"
|
||||||
|
# ]
|
||||||
|
# buckets:
|
||||||
|
# [
|
||||||
|
# 0.01,
|
||||||
|
# 0.05,
|
||||||
|
# 0.1,
|
||||||
|
# 0.5,
|
||||||
|
# 1.0,
|
||||||
|
# 2.0,
|
||||||
|
# 3.0,
|
||||||
|
# 4.0,
|
||||||
|
# 5.0,
|
||||||
|
# 6.0,
|
||||||
|
# 7.0,
|
||||||
|
# 8.0,
|
||||||
|
# 9.0,
|
||||||
|
# 10.0,
|
||||||
|
# 12.0,
|
||||||
|
# 15.0,
|
||||||
|
# 18.0,
|
||||||
|
# 20.0,
|
||||||
|
# 25.0,
|
||||||
|
# 30.0,
|
||||||
|
# 40.0,
|
||||||
|
# 50.0,
|
||||||
|
# 60.0,
|
||||||
|
# 70.0,
|
||||||
|
# 80.0,
|
||||||
|
# 90.0,
|
||||||
|
# 100.0,
|
||||||
|
# 110.0,
|
||||||
|
# 120.0,
|
||||||
|
# 150.0,
|
||||||
|
# 180.0,
|
||||||
|
# 210.0,
|
||||||
|
# 240.0,
|
||||||
|
# 300.0,
|
||||||
|
# 360.0,
|
||||||
|
# 420.0,
|
||||||
|
# 480.0,
|
||||||
|
# 540.0,
|
||||||
|
# 600.0,
|
||||||
|
# 900.0,
|
||||||
|
# 1200.0,
|
||||||
|
# 1800.0,
|
||||||
|
# 2400.0,
|
||||||
|
# 3000.0,
|
||||||
|
# 3600.0,
|
||||||
|
# ]
|
||||||
@@ -21,3 +21,4 @@
|
|||||||
.idea/
|
.idea/
|
||||||
*.tmproj
|
*.tmproj
|
||||||
.vscode/
|
.vscode/
|
||||||
|
tests/
|
||||||
|
|||||||
@@ -0,0 +1,9 @@
|
|||||||
|
suite: "AutoscalingRunnerSet"
|
||||||
|
templates:
|
||||||
|
- autoscalingrunnserset.yaml
|
||||||
|
tests:
|
||||||
|
- it: should render base labels
|
||||||
|
set:
|
||||||
|
scaleset.name: "test"
|
||||||
|
auth.url: "https://github.com/org"
|
||||||
|
auth.githubToken: "gh_"
|
||||||
Reference in New Issue
Block a user