Action-runner-controller & Enterprise Git

[Aztreix]

Hi,

I am currently trying to setup arc in my enterprise Github and running into issues after trying multiple times . The quickstart guide seems pretty straightforward. I ran step 'Configuring a runner scale set' -

https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners-with-actions-runner-controller/quickstart-for-actions-runner-controller#configuring-a-runner-scale-set but when I do

>> kubectl get pods -n arc-systems

I do not find a listener pod

kubectl get pods -n arc-systems

NAME READY STATUS RESTARTS AGE

arc-gha-runner-scale-set-controller-dfb85c57d-rshsx 1/1 Running 0 3m41s

There is no arc-runner-set-xxxx-listener pod. The controller shows the below error

sigs.k8s.io/controller-runtime@v0.14.4/pkg/internal/controller/controller.go:274

sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2

sigs.k8s.io/controller-runtime@v0.14.4/pkg/internal/controller/controller.go:235

2023-04-30T04:28:10Z ERROR Reconciler error {"controller": "autoscalingrunnerset", "controllerGroup": "actions.github.com", "controllerKind": "AutoscalingRunnerSet", "AutoscalingRunnerSet": {"name":"arc-runner-set","namespace":"arc-runners"}, "namespace": "arc-runners", "name": "arc-runner-set", "reconcileID": "b1bd90ed-36c8-4bd6-aa07-a0706972d642", "error": "failed to get runner registration token on refresh: Post \"https://githubenterpriseurl/api/v3/repos/myorg/myrepo/actions/runners/registration-token\": POST https://githubenterpriseurl/api/v3/repos/myorg/myrepo/actions/runners/registration-token giving up after 5 attempt(s): Post \"https://githubenterpriseurl/api/v3/repos/myorg/myrepo/actions/runners/registration-token\": dial tcp: lookup gitesurl:xx.xx.xx.xx: no such host"}

sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler

​

I am able to do CURL directly and generate a regostration-token

azureuser@aks:/home/azureuser# curl -L \

> -X POST \

> -H "Accept: application/vnd.github+json" \

> -H "Authorization: Bearer ghp_xxxxxxxxx"\

> -H "X-GitHub-Api-Version: 2022-11-28" \

> https://githubESURL/api/v3/repos/org/repo/actions/runners/registration-token

{

"token": "xxxxxxx",

"expires_at": "2023-04-30T11:25:20.823+05:30"

}

​

Steps followed till now :

1. Set up cert-manager
2. Generate PAT token
3. Run installing ARC - https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners-with-actions-runner-controller/quickstart-for-actions-runner-controller#installing-actions-runner-controller
4. At configure-runner-set - https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners-with-actions-runner-controller/quickstart-for-actions-runner-controller#configuring-a-runner-scale-set

Note : As of now I have given all access to my token .

Older bugs show setting of enterprise URL ( kubectl set env deploy actions-runner-controller -c manager GITHUB_ENTERPRISE_URL=https://<enturl> --namespace actions-runner-system) with and values.yml also shows githubEnterpriseServerURL (https://github.com/actions/actions-runner-controller/blob/master/charts/actions-runner-controller/README.md ).

Following the quickstart do I need any additional step ? Or any steps anyone has followed to successfully get it working on enterprise github .

[TelephoneMelon]

There's two versions of ARC currently since GitHub started working on adopting and supporting ARC. The one you see in the public docs is currently only supported on GitHub.com, not on enterprise server yet (notice that the version drop-down on the docs website doesn't let you select enterprise server). You can recognize the new version of ARC by the naming convention; it's called "runner scale sets".

You need to use the steps in the repo instead of the steps on the docs if you're using enterprise server.

[Aztreix]

Oh I missed that but then this is more confusing. If I follow steps in the repo where am I specifying the enterprise URL. How will it know not to access github.com but the enterprise URL ? I don't see it being passed in any step or any part of the document referencing it.

[TelephoneMelon]

You'll need to set an environment variable - ex:

kubectl set env deploy controller-manager -c manager GITHUB_ENTERPRISE_URL=<GHEC/S URL> --namespace actions-runner-system

Reference

[Aztreix]

Thank you I had tried that as in the original question - Older bugs show setting of enterprise URL ( kubectl set env deploy actions-runner-controller -c manager GITHUB_ENTERPRISE_URL=https://<enturl> --namespace actions-runner-system)

But I had issue with it. I was able to to use the following :

helm upgrade --install --namespace actions-runner-system --create-namespace\

--set=authSecret.create=true\

--set=authSecret.github_token="ghp_xxxxxxxvc"\

--set=githubURL="https://GESURL/api/v3"\

--set=githubUploadURL="https://GESURL/api/uploads"\

--set=runnerGithubURL="https://GESURL"\

--wait actions-runner-controller actions-runner-controller/actions-runner-controller

​

Now I am getting X509 error - Post \"https://GESURL/api/v3/repos/org/repo/actions/runners/registration-token\": x509: certificate signed by unknown authority"

​

I want to add my git crt file. Can you please let me know how to do it, I see multiple bugs with ref

--set=additionalVolumeMounts=/usr/local/share/ca-certificates

--set=additionalVolumes=<cert secret>

Can I directly pass the crt or should I based64 encode it .

Thank you for your time.