Skip to content

Commit

Permalink
PLT-754 Ensure runner runs as root (#166)
Browse files Browse the repository at this point in the history
## 🎫 Ticket

https://jira.cms.gov/browse/PLT-754

## 🛠 Changes

Ensure the runner container runs as root.

## ℹ️ Context

As noted in actions/checkout#956, GitHub still
expects runner containers to run as root. Permissions around the
actions/checkout step break in a number of ways if this is not set.

## 🧪 Validation

Will apply and test in the job currently failing on
CMSgov/bcda-app#1031.
  • Loading branch information
gsf authored Jan 24, 2025
1 parent 89460c2 commit 7ede229
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions terraform/services/github-actions-runner/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -99,6 +99,9 @@ module "github-actions-runner" {
# Defaults to 5 minutes
runner_boot_time_in_minutes = 10

# Run as root to avoid https://github.com/actions/checkout/issues/956
runner_as_root = true

runner_iam_role_managed_policy_arns = [aws_iam_policy.runner.arn]
runner_additional_security_group_ids = [data.aws_security_group.vpn.id]

Expand Down

0 comments on commit 7ede229

Please sign in to comment.