feat(actions-runner-controller): migrate to new charts

.pre-commit-config.yaml

@@ -102,4 +102,8 @@ repos:
     rev: v0.3.0
     hooks:
       - id: check-flux-helm-values
-        exclude: (kubernetes/apps/home-automation/home-assistant/app/patches/db-init.yaml)
+        exclude: |
+          (?x)^(
+            kubernetes/apps/home-automation/home-assistant/app/patches/db-init.yaml|
+            kubernetes/apps/github/actions-runner-controller/.+/helm-release.yaml
+          )$()

kubernetes/apps/github/actions-runner-controller/flux-sync.yaml

@@ -1,4 +1,39 @@
+# ---
+# apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+# kind: Kustomization
+# metadata:
+#   name: apps-actions-runner-controller
+#   namespace: flux-system
+#   labels:
+#     substitution.flux.home.arpa/enabled: "true"
+# spec:
+#   interval: 10m
+#   path: ./kubernetes/apps/github/actions-runner-controller/app
+#   prune: true
+#   sourceRef:
+#     kind: GitRepository
+#     name: home-ops
+#   wait: true
+# ---
+# apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+# kind: Kustomization
+# metadata:
+#   name: apps-actions-runner-controller-runners
+#   namespace: flux-system
+#   labels:
+#     substitution.flux.home.arpa/enabled: "true"
+# spec:
+#   dependsOn:
+#     - name: apps-actions-runner-controller
+#   interval: 10m
+#   path: ./kubernetes/apps/github/actions-runner-controller/runners
+#   prune: true
+#   sourceRef:
+#     kind: GitRepository
+#     name: home-ops
+#   wait: true
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1beta2.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
 metadata:
@@ -8,13 +43,14 @@ metadata:
     substitution.flux.home.arpa/enabled: "true"
 spec:
   interval: 10m
-  path: ./kubernetes/apps/github/actions-runner-controller/app
+  path: ./kubernetes/apps/github/actions-runner-controller/operator
   prune: true
   sourceRef:
     kind: GitRepository
     name: home-ops
   wait: true
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1beta2.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
 kind: Kustomization
 metadata:

kubernetes/apps/github/actions-runner-controller/operator/helm-release.yaml

@@ -0,0 +1,30 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: actions-runner-controller
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: actions-runner-controller-charts/gha-runner-scale-set-controller
+      version: 0.6.0
+      sourceRef:
+        kind: HelmRepository
+        name: actions-runner-controller-charts
+        namespace: flux-system
+      interval: 30m
+
+  install:
+    crds: CreateReplace
+  upgrade:
+    crds: CreateReplace
+
+  values:
+    fullnameOverride: gha-runner-scale-set-controller
+    # resources:
+    #   requests:
+    #     memory: 64Mi
+    #   limits:
+    #     memory: 128Mi

kubernetes/apps/github/actions-runner-controller/operator/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: github
+resources:
+  - ./helm-release.yaml
+  - ./secrets.sops.yaml

kubernetes/apps/github/actions-runner-controller/operator/secrets.sops.yaml

@@ -0,0 +1,30 @@
+# yamllint disable
+apiVersion: v1
+metadata:
+    name: actions-runner-controller-auth
+kind: Secret
+data:
+    github_app_id: ENC[AES256_GCM,data:Y+GxZAkZ+tM=,iv:7zOoiotC09kJzsyAhNPXRSGE6CcQRnpJ/3JWyH3kulA=,tag:k695S4wARRl9urgq7W79zw==,type:str]
+    github_app_installation_id: ENC[AES256_GCM,data:dNSfvPcvYU2PgsMd,iv:XRQI0SyR9a0/K5Fzkft/pmHh0ky/iFevFo2gvhJo6MQ=,tag:Bcqkxg+Rt67dkxzCRQhc6w==,type:str]
+    github_app_private_key: ENC[AES256_GCM,data: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,iv:HLvQyj53PyaVvLl/U/VoYYKgGA4UBwp5Kk/2e1IAIQw=,tag:fm7kj0qpVedKGFP8bQcN6A==,type:str]
+    github_webhook_secret_token: ENC[AES256_GCM,data:RLamV6WZ5YxJX7w7d+pemTYe9j1knxvyOXE8jPz34fCv59p58C+L25Wv49ZPPWWbllAPxfpSBBe6UHfknuDYUZmf/wq4gnIP1DX3Ykc6PCBcKAuMDVOTS3cztrlfbGgPI3Zu1N+Dy0kTmC5kfOSso3QbAQMexO4b,iv:lG97aj3sznntpa6peKrahKJqo8J6kqpUW0ncRw8S6gw=,tag:bgx9mmxKuAVE5Y+GidgPAg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age16zqeqx5y6ay3flwz0d06rn83yjv9ckys3j8tpkysf9v6295fhc6sf4r0uj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzYjdZeVptaDlPZW9idmtP
+            UkRGdmxyb0REM2s4dnZVSERQNFFSRHlqVkcwClJlZHVhQUVnUm16QVloazMyUUFx
+            Q24vakF5RUEvMTExZ0lPa1RXblFEV3cKLS0tIFNMcGx3NzRQT0U4MTZER0FQUzh3
+            SThDODl4ZFFMMUlxM3BneWlrNDdjdUUKm16agevW+HLV4al0q2m5W/SyS84E5SXh
+            QfWlkG1byRaLRQ+tMeTuCN0tk2A2asmSPygQ1IKo4AO9kMirDEjQ6w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-04-14T22:36:13Z"
+    mac: ENC[AES256_GCM,data:uWps7zHOzVJV71TR4g/+0XrZihsKe+FwJ57aC1zTwRAZA+aMfYfQ/F0QFn0nTAAos3IA86jPtuJPulrMAXIohxy6sP5ml2FWX7He/dSGotn6Sd8MHs5h8JvXgR5j4YbOc9Vf4m8BmSYM75vjzs3j7T3Uc0zJhXwmTiQndmaYtto=,iv:kwpW/kPtL5glF+fbXbMcROBZn/F5i+cw+/kDPTigEVo=,tag:UQroA3wAqqyuMUzzyo/kzQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.3

kubernetes/apps/github/actions-runner-controller/runners/kustomization.yaml

@@ -1,11 +1,18 @@
+# ---
+# apiVersion: kustomize.config.k8s.io/v1beta1
+# kind: Kustomization
+# namespace: github
+# resources:
+#   - organization.sops.yaml
+#   - tyriis.sops.yaml
+#   - jazzlyn.sops.yaml
+#   - organization-runner-deployment.yaml
+#   - tyriis-runner-deployment.yaml
+#   - jazzlyn-runner-deployment.yaml
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: github
 resources:
-  - organization.sops.yaml
-  - tyriis.sops.yaml
-  - jazzlyn.sops.yaml
-  - organization-runner-deployment.yaml
-  - tyriis-runner-deployment.yaml
-  - jazzlyn-runner-deployment.yaml
+  - tyriis/secrets.sops.yaml
+  - tyriis/home-ops/helm-release.yaml

kubernetes/apps/github/actions-runner-controller/runners/tyriis/home-ops/helm-release.yaml

@@ -0,0 +1,48 @@
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: tyriis-home-ops
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: actions-runner-controller-charts/gha-runner-scale-set
+      version: 0.6.0
+      sourceRef:
+        kind: HelmRepository
+        name: actions-runner-controller-charts
+        namespace: flux-system
+      interval: 30m
+
+  values:
+    runnerScaleSetName: arc-runner-set-home-ops
+
+    githubConfigUrl: https://github.com/tyriis/home-ops
+
+    minRunners: 0
+    maxRunners: 3
+
+    containerMode:
+      type: "dind"
+
+    template:
+      spec:
+        containers:
+          - name: runner
+            image: ghcr.io/actions/actions-runner:2.309.0@sha256:689735691f58a631efd20dbf6a0c841ea182d69a38ca0e3984362a14a853d2ce
+
+  valuesFrom:
+    - kind: Secret
+      name: tyriis-runners
+      valuesKey: github_app_id
+      targetPath: githubConfigSecret.github_app_id
+    - kind: Secret
+      name: tyriis-runners
+      valuesKey: github_app_installation_id
+      targetPath: githubConfigSecret.github_app_installation_id
+    - kind: Secret
+      name: tyriis-runners
+      valuesKey: github_app_private_key
+      targetPath: githubConfigSecret.github_app_private_key

kubernetes/apps/github/actions-runner-controller/runners/tyriis/secrets.sops.yaml

@@ -0,0 +1,29 @@
+# yamllint disable
+apiVersion: v1
+metadata:
+    name: tyriis-runners
+kind: Secret
+data:
+    github_app_id: ENC[AES256_GCM,data:YKJsljSgaog=,iv:6kpxRt89bGLGV8UVAuzRH/HI1rzXFb9oVHT10PcvbLg=,tag:TtWPyb+QJq8b5MhS2793Sw==,type:str]
+    github_app_installation_id: ENC[AES256_GCM,data:K5ir/GRPKfYKO5Hp,iv:2ViLvxjjtTcc7INkR2TDGC0mzcEFCjFmLc/IZdFZh+4=,tag:jIowEIhbBT2qzLc1J/lQLA==,type:str]
+    github_app_private_key: ENC[AES256_GCM,data:u/4Bz8vQTxYMbOnIM473tZnOWGFHAWYCjOUMoMJ4mV58WeErfslk22BAgflSfQm4x1kr/0rm4D4PldMepIji56LLpyu4SzRKmITakUAegbj9k/r0DaJ3NTqwi8Vrt/lruNYfeywxizT/BCycwWKe/NbTyIs1/wuFO7kqBC+0LGMFxg9TjCKoEmoJrUN4rHsS/vOxg7bJYZ0nfA2+dwY/mPpiUb6YY9cF3hrWgT14jJesTyRqIA5r1yKoOgLslQhk8jFQa3GRJR8Fh3e3tZCH/rmC7cN++xfzLW0iUnXuqotiAQM5knEE6x2+Xyx6o1zsWSD6GDzMrz317TsURP/qwwInHCEm8/pm3UNOSw5SyY4Eg4frebIYEQ6TZlzqIfu4tYvZzhUDUc8kBSH+CJK7FbYH0knzzIAljxw8Kxivsj/tm7Uw9++ixP69b6QkHBMyihuG53DI/PHzd3OTKmqoLtvEV7Y2FnP8FfZ3M1Eblcay+ff8ytX47mabJgV8AxA8DMiP0U9nNX6l247u9o80VppcOJOboTDRwtCAO2zXSKKdymcC/ItdzMlxIgVu+797eQyQglae9eeS2/hXNUedz9WYC7irmuCQbSCj4TL3FoXQFasgXOiu+GaBdsHBU8/l1zrMpeKEVib6Jkk580lRbJ1QDC/lQZNFrLwZXPqG/M3BCwVD8bhbugb12lU6tb5ZnrVN80oStknRjqQV3rjJDF8tx9iK0h0qTPAtPn1qbTAQOwQNxlEOeyIj27UB1yvNvjHQ0WE5salPBo7ce7+i9/ZDbs83VXtnfr+ZMrEe+0dAD5vJjuwGBTichnhGv6+nj2glYPRgEl4tNKjfIwa8pbvORpq2r9MjlftjJi/ja2c2iVsNL9tTVEx98ZJWYeacEgOf553XixSP8ciswHwEnodnITF71VfF20d0fFkJkKWaxubDstSnG8wUlS2nD8pyWS8526bYSekTj+qhdtEO5VqbDb3dDcN1hBuVrfsMwZQUNQmm3Esgn6EVryQA1mh7y9zHLK0aMUOlUCSj+cKJ4UHBnVmDMtZOqJa4nKar9mc99zjHdyt7fkTOQ3Q+AcAj8SR+1IU+xfc0UevUvPfe5nMomz67DXYXhajb1aMCri85uA6cAz2XFgRoRiIi5JEAm0eUOgB1AERpGoIbd5KFJCl1Jc3QIt3oDcWz+RgQ5hnzBi72VI335A/IIDTrcJ8JZZd0fz0rVKdynfjJhMtc4YXj6vAeKjhdM1/ZyE+84aqhWk6Fbs+UnwEf1v+6AhMBAn6Kl3Y5kOJprA7c/elPSKweQdBfTm47gfvhPNuCxzfxKVg7O+Ta9Rp2sB5NqQYS9q6TEXNXkJ7WFNucNmboj6JX4DbvqlkFD0bv5nevac5dl1b9eo84ZKHWzmr27Gfc2lMg4aaou1IEFflqQ+hH7hdRrYJkJDVP0BKzErXLpccwtnprchKhDh+elEr0LAmSxknigY746sH6ZbRtVgGByjnmNDCYAqcb6tAfarU9PzItoE8QlxdDb6ELWM807UIB2N4Xkeu0JWPXrwNUQr7RayFQqVcCldrGaMgGeaxCpkZ1tUuCwN4S2h9TQERxF/4ANXWeFZktbOMiQpVAYjRkusoiUmOix/eE8FHzbeeUIYG2drgrwk22Kw45NfggKozIGo2BPD7hO0dE+iaBEX/Xxedm2OdZObpAAjHpMQq+3gp81dLDtle+IX/MCHMMJ9KgSAifEFPMtjq+FlhUi8AV4QlfnEDWFd6/P+qJlS95LNQuuwQ0cJG6UKSSiYxcS9CvafkpozF4cGKpm4RtZ4F4Qk/k+Tlxe/dr5d8FR8lOk48l3nqyYO3c0YioXUBhZcbP83mOLhBjsHftn1App4MY/qdrlPoD3e+HLrTii89bS7nehnR6HtBpj/V+rcoWC3xqn3vRS6jyj4bvCnxkBnsAthnV/MiALcgLXrUu7D2oIOY1iiMK+6ozl2keKgUQEU3tR8fshCIebaZHIJ+Z7B3duz4J3HVeBVhJGaKbGkEKqHhow06T61LCMG9GLaXFXeHVc3T1AggXAEjh1O8wOJ4PSKE1x5GtcTyowX+mIvnX91okit2jGu4WJoCRejF/a2HONzpiH7JAhF7SjYlcy3/Kg2Ny3xWInZcEyobEkTnf38BZkz+PO9daezwAuOvhy+h8tvgknab+AIj6+FblySTNbEwhomUrucolExjVkzSDlHmhXBJccyQs5zSfeGF5dCjGJFg2YY/BzGhMJyiyQsU5EI1E76tYy9RTxq4vQIQl26uCVcnjaUd16zhfyX+22ieza1F0oOlcCSLKMBn2OceuXK48ZanWqHFRxYNe3xyBmiLRyLjivWpzayQqnNFk5IvS+JYiZaMNOK/2WIVvltaX3ZOqny/qJQqdVVFCWeQzt3utEgx1KZCcb0WokBEuLegGYnPh/ZB0CeAijXBrg0cPO1Hpy6/HtuT09mjJNzc2eysv34lFb6sy4cbjtIqlPnOfF2xiRblrn5WWKgyXkAWJY3CDiGOUjD3I4r0OZrO9edCoAU2wtK7wwJM+7RneakTvD30Z7V/7wY4Bhn4Nxd3XuvS4c6O9FnE1S6POklotqkjdnridEl/mkR/z5o1/CfFpbtTpU0+Jgt4J04POum8zmEchdc6ynT4UYIWixEOvNyO85Bl/kH7BCAyFacuEIdoAukGiKz2xQOYPlU6Ee+HTQ0uN5BLRu3/zOiVJf+n8eGwQMyEut8sGjMowFvHfBJ+N3s37Gds7qY7Rsklf2QRbAQvfFLoxJYQLfb3RqKOyRrk9IY6IW1piNuDYb0Fd1l+HZIvCSXXKsJYyD9T1VEkJfqSoYbP5YHk1GEp7q5viQX0OR55a4kqUeeENP27K2TcXH9khEz64l00S4M0HbFSXlA4FYKkFcCLTh3XN5xOUWTd+1jwE1EnLR17iHBnGOFKqb7MNcz4OkNDEeGNszBsyDgUde8nSuftVrQeGJ6MaWs4=,iv:O1UOHQDGZY6DZnCb5RI6mrLWFbTI8Z+PoQ4PR5J2bSI=,tag:PGbUOcxC659p81FKC7Orxw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age16zqeqx5y6ay3flwz0d06rn83yjv9ckys3j8tpkysf9v6295fhc6sf4r0uj
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzYjdZeVptaDlPZW9idmtP
+            UkRGdmxyb0REM2s4dnZVSERQNFFSRHlqVkcwClJlZHVhQUVnUm16QVloazMyUUFx
+            Q24vakF5RUEvMTExZ0lPa1RXblFEV3cKLS0tIFNMcGx3NzRQT0U4MTZER0FQUzh3
+            SThDODl4ZFFMMUlxM3BneWlrNDdjdUUKm16agevW+HLV4al0q2m5W/SyS84E5SXh
+            QfWlkG1byRaLRQ+tMeTuCN0tk2A2asmSPygQ1IKo4AO9kMirDEjQ6w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-09-19T20:08:23Z"
+    mac: ENC[AES256_GCM,data:GVXx4Kkg58RowzXQfH6Lni2Tp2xsbqrP2j7ggWdyTPvcFZqQPzanSNLWUELQqyVlmGq7n+ZwNUeZbvFZ/eAVo+cB2MxS/9SuBZXE5dbsQVaJT2t00N3witBdXDHCnFwzYCCbbimg8IScvoeMuU2n9ooWCK4LsXg0fU/b6/qDA3M=,iv:WdUiCwKvxFv1p6UxFCS/7HKnwZpSbaV6DwgZN1TiVGg=,tag:PKhdoeix7w8CpOBEAsGR3g==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.0

kubernetes/flux/repositories/helm/actions-runner-controller-charts.yaml

@@ -1,10 +1,12 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrepository-source-v1beta2.json
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
 metadata:
   name: actions-runner-controller-charts
   namespace: flux-system
 spec:
-  interval: 15m
-  url: https://actions-runner-controller.github.io/actions-runner-controller
+  type: oci
+  interval: 30m
+  url: oci://ghcr.io/actions
   timeout: 3m