Enterprise runners

[swathida-byte]

What are permissions that are required to create personal access token for enterprise level runners
currently I have these permissions set
I'm getting this error

ERROR	actions-runner-controller.runner	Failed to get new registration token	{"runner": "enterprise-runner-ljwc6-tvj58", "error": "failed to create registration token: POST https://api.github.com/enterprises/****/actions/runners/registration-token: 403 API rate limit of 60 still exceeded until 2022-08-22 06:15:20 +0000 UTC, not making remote request. [rate reset in 23m51s]"}
github.com/actions-runner-controller/actions-runner-controller/controllers.(*RunnerReconciler).processRunnerCreation
	/workspace/controllers/runner_controller.go:247
github.com/actions-runner-controller/actions-runner-controller/controllers.(*RunnerReconciler).Reconcile
	/workspace/controllers/runner_controller.go:128
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:121
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:320
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:273
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:234

We are using github.infra.***.com should make any changes regarding API things??

[mumoshu]

@swathida-byte Hey. 403 API rate limit of 60 still exceeded seems to say that your request has been successfully authenticated but your quota is somehow super low(only 60 per 24h?! crazy!!).
What's github.infra.***.com? Is it a kind of an isolated or regulated variant of GitHub?

[swathida-byte]

Github.infra.**.com is the enterprise server ,url looks something like this https://github.infra.***.com/ instead https://github.com/

[mumoshu]

@swathida-byte Ah, gotcha. It's your internal GHES instance, right?
I think you need to consult one of the admins of your GHES instance within your company, or your GitHub Enterprise support representative, to see what's happening and how to increase the API rate limit.
In other words, this doesn't look like an issue in ARC.

[swathida-byte]

If API limit rate is increased then it works right?Nothing to do with permissions?

[mumoshu]

@swathida-byte Yeah- seems so to me. The error message doesn't mention or imply any permission error.

[swathida-byte]

2022-08-22T09:17:43Z	ERROR	actions-runner-controller.runner	Unable to remove finalizer	{"runner": "re-github-actions/re-centos7-deployment-rzpdn-7bz5b", "error": "namespaces \"re-github-actions\" not found"}
github.com/actions-runner-controller/actions-runner-controller/controllers.(*RunnerReconciler).Reconcile
	/workspace/controllers/runner_controller.go:116
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:121
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:320
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:273
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:234
2022-08-22T09:17:43Z	ERROR	Reconciler error	{"controller": "runner-controller", "controllerGroup": "actions.summerwind.dev", "controllerKind": "Runner", "runner": {"name":"re-centos7-deployment-rzpdn-7bz5b","namespace":"re-github-actions"}, "namespace": "re-github-actions", "name": "re-centos7-deployment-rzpdn-7bz5b", "reconcileID": "6fad3071-047d-4e35-a78a-3268d14b489b", "error": "namespaces \"re-github-actions\" not found"}
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:273
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:234

[mumoshu]

It does not seem like an ARC issue.

[mumoshu]

@swathida-byte Sorry to say, but can we move this to Discussions? We explicitly say in https://github.com/actions-runner-controller/actions-runner-controller/issues/new/choose that we'd use Discussions for questions and user support. Making an exception might result in making Issues overwhelmed by a ton of questions and hide possible real bug reports which we need to handle in high priority 🙏

[swathida-byte]

sure

[swathida-byte]

Failed to get new registration token	{"runner": "enterprise-runner-htzmw-48wnd", "error": "failed to create registration token: POST https://api.github.com/enterprises/Cloudera/actions/runners/registration-token: 401 Bad credentials []"}
github.com/actions-runner-controller/actions-runner-controller/controllers.(*RunnerReconciler).processRunnerCreation
	/workspace/controllers/runner_controller.go:247
github.com/actions-runner-controller/actions-runner-controller/controllers.(*RunnerReconciler).Reconcile
	/workspace/controllers/runner_controller.go:128
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:121
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:320
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:273
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
	/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:234

"reason": "FailedUpdateRegistrationToken", "message": "Updating registration token failed"
each time its showing different logs

[toast-gear]

this won't be an ARC issue, does your user that the PAT is under actually have enterprise admin rights?

[thepoppingone]

From your first screenshot you lack the enterprise level permissions that should be there if the user is an enterprise admin...

[sameerjethvani-alation]

Looking at URL in your error msgs https://api.github.com.... & you mentioned you have GHES instance (something like this [https://github.infra.***.com/](https://github.infra.%2A%2A%2A.com/) instead https://github.com/) .

Make sure to pass githubEnterpriseServerURL: <your_ghes_url> (in case using helm chart) https://github.com/actions/actions-runner-controller/blob/master/charts/actions-runner-controller/values.yaml#L19 .
Reference : https://github.com/actions/actions-runner-controller/blob/master/docs/about-arc.md#github-enterprise-support ,