actions/actions-runner-controller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
master
actions-runner-controller/config/rbac/role.yaml

190 lines
2.6 KiB
YAML
Raw Permalink Normal View History

Implement runner controller
2020-01-28 21:58:01 +09:00
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: manager-role
rules:
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- apiGroups:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- ""
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- events
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
verbs:
- create
- patch
- apiGroups:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- ""
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- persistentvolumeclaims
- pods
- pods/finalizers
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
verbs:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- create
- delete
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- get
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- list
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- patch
- update
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- watch
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- apiGroups:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- ""
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- persistentvolumes
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
verbs:
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- ""
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- pods/status
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
verbs:
- get
- apiGroups:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- ""
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- secrets
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
verbs:
- create
- delete
- get
- list
- update
- watch
- apiGroups:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- ""
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- serviceaccounts
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- actions.github.com
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- autoscalinglisteners
- autoscalingrunnersets
- ephemeralrunners
- ephemeralrunners/finalizers
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- ephemeralrunnersets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
Extend manager roles to accept ephemeralrunnerset/finalizers (#2493)
2023-04-10 08:49:32 +02:00
- apiGroups:
- actions.github.com
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- autoscalinglisteners/finalizers
- autoscalingrunnersets/finalizers
Extend manager roles to accept ephemeralrunnerset/finalizers (#2493)
2023-04-10 08:49:32 +02:00
verbs:
- update
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- apiGroups:
- actions.github.com
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- autoscalinglisteners/status
- autoscalingrunnersets/status
- ephemeralrunners/status
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- ephemeralrunnersets/status
verbs:
- get
- patch
- update
feat: Use HorizontalRunnerAutoscaler for autoscaling
2020-07-19 18:42:06 +09:00
- apiGroups:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- actions.github.com
feat: Use HorizontalRunnerAutoscaler for autoscaling
2020-07-19 18:42:06 +09:00
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- ephemeralrunnersets/finalizers
Ensure controller-gen is up-to-date and the code and the manifests are in-sync Follow-up for #95 that added /finalizers subresource permission and #103 that upgraded controller-gen from 0.2.4 from 0.3.0
2020-10-06 09:23:03 +09:00
verbs:
- patch
- update
- apiGroups:
- actions.summerwind.dev
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- horizontalrunnerautoscalers
Allowing access to finalizers for all managed resources (#95)
2020-10-04 20:12:01 -04:00
- horizontalrunnerautoscalers/finalizers
feat: RunnerDeployment Adds the initial version of RunnerDeployment that is intended to manage RunnerSets(#1), like Deployment manages ReplicaSets. This is the initial version and therefore is bare bone. The only update strategy it supports is `Recreate`, which recreates the underlying RunnerSet when the runner template changes. I'd like to add `RollingUpdate` strategy once this is merged. This depends on #1 so the diff contains that of #1, too. Please see only the latest commit for review. Also see https://github.com/mumoshu/actions-runner-controller-ci/runs/471329823?check_suite_focus=true to confirm that `make tests` is passing after changes made in this commit.
2020-02-26 21:23:23 +09:00
- runnerdeployments
Allowing access to finalizers for all managed resources (#95)
2020-10-04 20:12:01 -04:00
- runnerdeployments/finalizers
Fix RBAC role for RunnerDeployment and RunnerReplicaSet
2020-03-15 18:08:11 +09:00
- runnerreplicasets
Allowing access to finalizers for all managed resources (#95)
2020-10-04 20:12:01 -04:00
- runnerreplicasets/finalizers
Fix RBAC role for RunnerDeployment and RunnerReplicaSet
2020-03-15 18:08:11 +09:00
- runners
Allowing access to finalizers for all managed resources (#95)
2020-10-04 20:12:01 -04:00
- runners/finalizers
feat: RunnerSet backed by StatefulSet (#629) * feat: RunnerSet backed by StatefulSet Unlike a runner deployment, a runner set can manage a set of stateful runners by combining a statefulset and an admission webhook that mutates statefulset-managed pods with required envvars and registration tokens. Resolves #613 Ref #612 * Upgrade controller-runtime to 0.9.0 * Bump Go to 1.16.x following controller-runtime 0.9.0 * Upgrade kubebuilder to 2.3.2 for updated etcd and apiserver following local setup * Fix startup failure due to missing LeaderElectionID * Fix the issue that any pods become unable to start once actions-runner-controller got failed after the mutating webhook has been registered * Allow force-updating statefulset * Fix runner container missing work and certs-client volume mounts and DOCKER_HOST and DOCKER_TLS_VERIFY envvars when dockerdWithinRunner=false * Fix runnerset-controller not applying statefulset.spec.template.spec changes when there were no changes in runnerset spec * Enable running acceptance tests against arbitrary kind cluster * RunnerSet supports non-ephemeral runners only today * fix: docker-build from root Makefile on intel mac * fix: arch check fixes for mac and ARM * ci: aligning test data format and patching checks * fix: removing namespace in test data * chore: adding more ignores * chore: removing leading space in shebang * Re-add metrics to org hra testdata * Bump cert-manager to v1.1.1 and fix deploy.sh Co-authored-by: toast-gear <15716903+toast-gear@users.noreply.github.com> Co-authored-by: Callum James Tait <callum.tait@photobox.com>
2021-06-22 17:10:09 +09:00
- runnersets
- runnersets/finalizers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- actions.summerwind.dev
resources:
Update all dependencies, conforming to the new controller-runtime API (#3949)
2025-03-11 15:52:52 +01:00
- horizontalrunnerautoscalers/status
- runnerdeployments/status
- runnerreplicasets/status
- runners/status
feat: RunnerSet backed by StatefulSet (#629) * feat: RunnerSet backed by StatefulSet Unlike a runner deployment, a runner set can manage a set of stateful runners by combining a statefulset and an admission webhook that mutates statefulset-managed pods with required envvars and registration tokens. Resolves #613 Ref #612 * Upgrade controller-runtime to 0.9.0 * Bump Go to 1.16.x following controller-runtime 0.9.0 * Upgrade kubebuilder to 2.3.2 for updated etcd and apiserver following local setup * Fix startup failure due to missing LeaderElectionID * Fix the issue that any pods become unable to start once actions-runner-controller got failed after the mutating webhook has been registered * Allow force-updating statefulset * Fix runner container missing work and certs-client volume mounts and DOCKER_HOST and DOCKER_TLS_VERIFY envvars when dockerdWithinRunner=false * Fix runnerset-controller not applying statefulset.spec.template.spec changes when there were no changes in runnerset spec * Enable running acceptance tests against arbitrary kind cluster * RunnerSet supports non-ephemeral runners only today * fix: docker-build from root Makefile on intel mac * fix: arch check fixes for mac and ARM * ci: aligning test data format and patching checks * fix: removing namespace in test data * chore: adding more ignores * chore: removing leading space in shebang * Re-add metrics to org hra testdata * Bump cert-manager to v1.1.1 and fix deploy.sh Co-authored-by: toast-gear <15716903+toast-gear@users.noreply.github.com> Co-authored-by: Callum James Tait <callum.tait@photobox.com>
2021-06-22 17:10:09 +09:00
- runnersets/status
verbs:
- get
- patch
- update
- apiGroups:
- apps
resources:
- statefulsets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resources:
- statefulsets/status
verbs:
- get
- patch
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- get
- list
- update
feat: allow to discover runner statuses (#1268) * feat: allow to discover runner statuses * fix manifests * Bump runner version to 2.289.1 which includes the hooks support * Add feedback from review * Update reference to newRunnerPod * Fix TestNewRunnerPodFromRunnerController and make hooks file names job specific * Fix additional TestNewRunnerPod test * Cover additional feedback from review * fix rbac manager role * Add permissions to service account for container mode if not provided * Rename flag to runner.statusUpdateHook.enabled and fix needsServiceAccount Co-authored-by: Yusuke Kuoka <ykuoka@gmail.com>
2022-07-09 23:11:29 -07:00
- apiGroups:
- rbac.authorization.k8s.io
resources:
- rolebindings
verbs:
- create
- delete
- get
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- list
- watch
feat: allow to discover runner statuses (#1268) * feat: allow to discover runner statuses * fix manifests * Bump runner version to 2.289.1 which includes the hooks support * Add feedback from review * Update reference to newRunnerPod * Fix TestNewRunnerPodFromRunnerController and make hooks file names job specific * Fix additional TestNewRunnerPod test * Cover additional feedback from review * fix rbac manager role * Add permissions to service account for container mode if not provided * Rename flag to runner.statusUpdateHook.enabled and fix needsServiceAccount Co-authored-by: Yusuke Kuoka <ykuoka@gmail.com>
2022-07-09 23:11:29 -07:00
- apiGroups:
- rbac.authorization.k8s.io
resources:
- roles
verbs:
- create
- delete
- get
Introduce new preview auto-scaling mode for ARC. (#2153) Co-authored-by: Cory Miller <cory-miller@github.com> Co-authored-by: Nikola Jokic <nikola-jokic@github.com> Co-authored-by: Ava Stancu <AvaStancu@github.com> Co-authored-by: Ferenc Hammerl <fhammerl@github.com> Co-authored-by: Francesco Renzi <rentziass@github.com> Co-authored-by: Bassem Dghaidi <Link-@github.com>
2023-01-17 12:06:20 -05:00
- list
- update
- watch
Reference in New Issue Copy Permalink