@@ -170,9 +170,9 @@ description: |-
170
170
#### Workflow Permissions
171
171
172
172
1. Browse to
173
- [https://github.com/organizations/{Org}/settings/actions](https://github.com/organizations/{Org}/settings/actions)
174
- (Organization) or
175
- [https://github.com/{Org}/{Repo}/settings/actions](https://github.com/{Org}/{Repo}/settings/actions) (Repository)
173
+ [https://github.com/organizations/{Org}/settings/actions](https://github.com/organizations/{Org}/settings/actions)
174
+ (Organization) or
175
+ [https://github.com/{Org}/{Repo}/settings/actions](https://github.com/{Org}/{Repo}/settings/actions) (Repository)
176
176
177
177
2. Set the default permissions for the GITHUB_TOKEN to Read Only
178
178
@@ -217,10 +217,10 @@ description: |-
217
217
and skip the rest. Otherwise, complete the private key setup in `core-<default-region>-auto`.
218
218
219
219
1. Convert the private key to a PEM file using the following command:
220
- `openssl pkcs8 -topk8 -inform PEM -outform PEM -nocrypt -in {DOWNLOADED_FILE_NAME}.pem -out private-key-pkcs8.key`
220
+ `openssl pkcs8 -topk8 -inform PEM -outform PEM -nocrypt -in {DOWNLOADED_FILE_NAME}.pem -out private-key-pkcs8.key`
221
221
1. Upload PEM file key to the specified ssm path: `/github/runners/acme/private-key` in `core-<default-region>-auto`
222
222
1. Create another sensitive SSM parameter `/github/runners/acme/registration-token` in `core-<default-region>-auto` with
223
- any basic value, such as "foo". This will be overwritten by the rotator.
223
+ any basic value, such as "foo". This will be overwritten by the rotator.
224
224
1. Update the GitHub App ID and Installation ID in the `github-action-token-rotator` catalog.
225
225
226
226
> [!TIP]
@@ -230,21 +230,21 @@ description: |-
230
230
#### (ClickOps) Obtain the Runner Registration Token
231
231
232
232
1. Browse to
233
- [https://github.com/organizations/{Org}/settings/actions/runners](https://github.com/organizations/{Org}/settings/actions/runners)
234
- (Organization) or
235
- [https://github.com/{Org}/{Repo}/settings/actions/runners](https://github.com/{Org}/{Repo}/settings/actions/runners)
236
- (Repository)
233
+ [https://github.com/organizations/{Org}/settings/actions/runners](https://github.com/organizations/{Org}/settings/actions/runners)
234
+ (Organization) or
235
+ [https://github.com/{Org}/{Repo}/settings/actions/runners](https://github.com/{Org}/{Repo}/settings/actions/runners)
236
+ (Repository)
237
237
238
238
2. Click the **New Runner** button (Organization) or **New Self Hosted Runner** button (Repository)
239
239
240
240
3. Copy the Github Runner token from the next screen. Note that this is the only time you will see this token. Note that
241
- if you exit the `New {Self Hosted} Runner` screen and then later return by clicking the `New {Self Hosted} Runner`
242
- button again, the registration token will be invalidated and a new token will be generated.
241
+ if you exit the `New {Self Hosted} Runner` screen and then later return by clicking the `New {Self Hosted} Runner`
242
+ button again, the registration token will be invalidated and a new token will be generated.
243
243
244
244
<img src="/assets/refarch/cleanshot-2022-03-01-at-16.12.26-20220302-005927.png" height="1010" width="833" /><br/>
245
245
246
246
4. Add the `REGISTRATION_TOKEN` to the `/github/token` SSM parameter in the account where Github runners are hosted
247
- (usually `automation`), encrypted with KMS.
247
+ (usually `automation`), encrypted with KMS.
248
248
249
249
```
250
250
chamber write github token <value>
@@ -262,11 +262,11 @@ description: |-
262
262
following tips:
263
263
264
264
1. The private key is stored at the given parameter path:
265
- `parameter_store_private_key_path: /github/runners/acme/private-key`
265
+ `parameter_store_private_key_path: /github/runners/acme/private-key`
266
266
1. The private key is Base 64 encoded. If you pull the key from SSM and decode it, it should begin with
267
- `-----BEGIN PRIVATE KEY-----`
267
+ `-----BEGIN PRIVATE KEY-----`
268
268
1. If the private key has changed, you must _redeploy_ `github-action-token-rotator`. Run a plan against the component
269
- to make sure there are not changes required.
269
+ to make sure there are not changes required.
270
270
271
271
## The GitHub Registration Token is valid, but the Runners are not registering with GitHub
272
272
0 commit comments