You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We have a deployment of ARC which has the runner pod spec heavily customised through template.spec Helm value, and would like to make use of the JIT tokens just like the default configuration does, as in:
Which doesn't work because such lookups do not work within valueFrom and causes an error like:
2024-05-01T02:53:20Z ERROR EphemeralRunner Failed to create a pod due to unrecoverable failure {"ephemeralrunner": {"name":"k8s-arm64-medium-test-wgpj4-runner-zz2km","namespace":"gha-runners"}, "error": "Pod \"k8s-arm64-medium-test-wgpj4-runner-zz2km\" is invalid: spec.containers[0].env[4].valueFrom.secretKeyRef.name: Invalid value: \"$(POD_NAME)\": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')"}
So I'd like to ask if is there a way to pass the secret name dynamically for ACTIONS_RUNNER_INPUT_JITCONFIG environment variable?
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
We have a deployment of ARC which has the runner pod spec heavily customised through
template.spec
Helm value, and would like to make use of the JIT tokens just like the default configuration does, as in:But of course given that
valueFrom.secretKeyRef.name
is dynamic and changes with every pod, we need to do this in a dynamic way.We have tried:
Which doesn't work because such lookups do not work within
valueFrom
and causes an error like:So I'd like to ask if is there a way to pass the secret name dynamically for
ACTIONS_RUNNER_INPUT_JITCONFIG
environment variable?Beta Was this translation helpful? Give feedback.
All reactions