ARC not running, no errors in the logs

[GabrielTabares]

Hello,

We are trying to run ARC on an AKS cluster.

I have got the helm chart, modified it a little bit (namespace and application name) and then we run the .yaml files from TF, so it picks up the secrets directly from Key Vault.

I have got to the point before I add the DeplomentRunner but the manager container in the arc pod does not start up properly. It tries to run but the only error I get is exit with error status 128.

I worked out that, if I pass an invalid command line arg, it errors out with debug, and this is the input:

Usage of /manager:
  -auto-scaler-image-pull-secrets value
        The default image-pull secret name for auto-scaler listener container.
  -auto-scaling-runner-set-only
        Make controller only reconcile AutoRunnerScaleSet object.
  -common-runner-labels value
        Runner labels in the K1=V1,K2=V2,... format that are inherited all the runners created by the controller. See https://github.com/actions/actions-runner-controller/issues/321 for more information
  -default-scale-down-delay duration
        The approximate delay for a scale down followed by a scale up, used to prevent flapping (down->up->down->... loop) (default 10m0s)
  -docker-gid string
        The default GID of docker group in the docker sidecar container. Use 1001 for dockerd sidecars of Ubuntu 20.04 runners 121 for Ubuntu 22.04. (default "1001")
  -docker-image string
        The image name of docker sidecar container to use by default if one isn't defined in yaml. (default "docker:dind")
  -docker-registry-mirror string
        The default Docker Registry Mirror used by runners.
  -enable-leader-election
        Enable leader election for controller manager. Enabling this will ensure there is only one active controller manager.
  -github-app-id int
        The application ID of GitHub App. (default $CORRECT_APP_ID)
  -github-app-installation-id int
        The installation ID of GitHub App. (default $CORRECT_INSTALLATION_ID)
  -github-app-private-key string
        The path of a private key file to authenticate as a GitHub App (default "-----BEGIN RSA PRIVATE KEY-----$CORRECT_KEY----END RSA PRIVATE KEY-----") # I know that the key is correct because otherwise it complains!
  -github-basicauth-password string
        Password for GitHub basic auth to use instead of PAT or GitHub APP in case it's running behind a proxy API (default "TEST_PASSWORD") # Is this required? I have not seen anywhere we have to set it
  -github-basicauth-username string
        Username for GitHub basic auth to use instead of PAT or GitHub APP in case it's running behind a proxy API
  -github-enterprise-url string
        Enterprise URL to be used for your GitHub API calls
  -github-token string
        The personal access token of GitHub. (default "ghs_Yz3gJSjh7tpjJ0tSKih1MbVrBJaiCj3LXG5A")
  -github-upload-url string
        GitHub Upload URL to be used for GitHub API calls
  -github-url string
        GitHub URL to be used for GitHub API calls
  -kubeconfig string
        Paths to a kubeconfig. Only required if out-of-cluster.
  -leader-election-id string
        Controller id for leader election. (default "actions-runner-controller")
  -log-format string
        The log format. Valid options are "text" and "json". Defaults to "text" (default "text")
  -log-level string
        The verbosity of the logging. Valid values are "debug", "info", "warn", "error". Defaults to "debug". (default "debug")
  -metrics-addr string
        The address the metric endpoint binds to. (default ":8080")
  -port int
        The port to which the admission webhook endpoint should bind (default 9443)
  -runner-github-url string
        GitHub URL to be used by runners during registration
  -runner-image string
        The image name of self-hosted runner container to use by default if one isn't defined in yaml. (default "summerwind/actions-runner:latest")
  -runner-image-pull-secret value
        The default image-pull secret name for self-hosted runner container.
  -runner-status-update-hook
        Use custom RBAC for runners (role, role binding and service account).
  -sync-period duration
        Determines the minimum frequency at which K8s resources managed by this controller are reconciled. (default 1m0s)
  -watch-namespace string
        The namespace to watch for custom resources. Set to empty for letting it watch for all namespaces.
  -watch-single-namespace string
        Restrict to watch for custom resources in a single namespace.

Any suggestions on what I can do to debug this? Normally, I would run a shell but the container has not got one.

Thanks