Skip to content

fix(arc): check orgs per cluster and refuse a scale set registered from two clusters - #136

Merged
Mearman merged 2 commits into
mainfrom
fix/arc-org-per-cluster
Oct 21, 2026
Merged

Mearman merged 2 commits into
mainfrom
fix/arc-org-per-cluster

Conversation

@Mearman

@Mearman Mearman commented Oct 21, 2026

Copy link
Copy Markdown
Member

The ARC validation compared github_runner_arc_orgs across every host in the inventory, so with two clusters in one inventory an org whose scale sets sit partly on each cluster's installer host was refused as configured twice.

The cross-host checks now run over the hosts of this host's cluster group (github_runner_cluster_group), which share one controller, its namespaces and the autoscaled pool. Within a cluster an org is still installed from one host, and the message names both hosts. Hosts of another cluster may install the same org, and are compared only for scale set names: the same org and release name registered from two clusters is refused, naming both profiles and hosts, since GitHub gives a scale set name to one controller at a time. A host that is not in its cluster group (the control node running playbooks/arc.yml, or an implicit localhost) cannot tell which hosts share its cluster, so it keeps the old behaviour and counts the whole inventory as one cluster.

The new arc_cluster_profiles filter does the grouping and the cross-cluster comparison and hands the cluster's orgs to arc_profiles. Tests cover the filter directly and the real validation tasks with a two-group inventory. The ARC README's line that only one profile in the inventory may be autoscaled was also wrong (several may be, with at most one setting sizing), and now says so per cluster.

Fixes #130

…om two clusters

The cross-host checks compared every host in the inventory, so an org whose
scale sets were split between two clusters was refused as a duplicate.
They now compare the hosts of this host's cluster group, which share a
controller, and compare other clusters' hosts only for the scale set
names GitHub gives to one controller at a time.
A host outside its cluster group still counts the whole inventory as one
cluster.

Fixes #130
@Mearman
Mearman marked this pull request as ready for review October 21, 2026 05:55
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-21T06:21:04.647458Z 5cfb8ea Manual request
🔒 Security Review ⚠️ Failed 2026-10-21T07:15:59.310785Z
We couldn’t complete this review. Comment @codex security review to try again.
5cfb8ea Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@Mearman

Mearman commented Oct 21, 2026

Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6851ba75a6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread plugins/filter/arc.py
…le says

The cross-cluster check compares scale sets by release name, which is
the scale set's registration identity only while the chart's
runnerScaleSetName defaults to it. A values file setting its own name
broke that, so the name is now passed with --set alongside the other
values the role owns.
@Mearman

Mearman commented Oct 21, 2026

Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Keep them coming!

Reviewed commit: 5cfb8ea31a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@Mearman

Mearman commented Oct 21, 2026

Copy link
Copy Markdown
Member Author

@codex security review

@chatgpt-codex-connector

Copy link
Copy Markdown

This security review couldn’t start because the paying account has exhausted its Codex allowance and has insufficient available credits. The payer can check their balance and add credits in the Codex usage dashboard, then try again. If you do not manage the paying account, contact this repository's admins.

@Mearman
Mearman merged commit 73cde13 into main Oct 21, 2026
40 checks passed
@Mearman
Mearman deleted the fix/arc-org-per-cluster branch October 21, 2026 07:18
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 2.7.8 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

ARC refuses an org split across two clusters in one inventory

1 participant