hmpps-github-actions-runner

This deploys a self-hosted Github Runner to a single repository named in the repository variables.

Documentation about it is here

It's deployed to Cloud Platforms, using Helm.

Secrets/variables required:

Repo secrets

GH_PRIVATE_KEY - A private key for a Github App that has rights to create runners in the destination repository

Environment secrets (populated by Cloud Platforms terraform)

KUBE_CERT - certificate for Kubernetes (can be found base64 encoded in ~/.kube/config)
KUBE_CLUSTER - Kubernetes cluster (found in ~/.kube/config)
KUBE_NAMESPACE - the namespace to which this runner will belong
KUBE_SERVER - the AWS eks instance on which the Kubernetes cluster is running (API endpoint)
KUBE_TOKEN - a token to gain access to the Kubernetes cluster. It's the long one.

Repo environment variables

GH_APP_ID - the corresponding AppId for the Github App
GH_REPOSITORY - the repo to which the runner should be registered
RUNNER_LABELS - the label by which the runner is invoked