search

cloudfoundry-incubator / kubecf

Cloud Foundry on Kubernetes
Apache License 2.0
115 stars 62 forks source link

Spike: Self-hosted GitHub Actions Runners (in ECP) #1230

Open satadruroy opened 4 years ago

satadruroy commented 4 years ago

The goal of this spike is to host the GH Actions runners in ECP with target KubeCF clusters running on Kind in ECP. GH Actions recommends not using self-hosted runners for public repos so we need to determine if we can sandbox the runners to mitigate risks and minimize the blast radius. May need more inputs from @viovanov and Dirk and subsequent grooming of this story.

https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners#self-hosted-runner-security-with-public-repositories

fargozhu commented 4 years ago

https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners#self-hosted-runner-security-with-public-repositories

viovanov commented 3 years ago

We should check with the security team that this is ok.