Centralised github secret

[lacarvalho91]

Hi,

I'm using ARC and I have a question around the github auth secret. I've noticed that it is a property of the AutoscalingRunnerSet resource and the k8s secret needs to live in the same namespace as the runner. What we would prefer is to create the secret once in the controller namespace and configure the controller with a global github secret instead of configuring it on each runner. This is because we have runners applied in different namespaces and we don't want the owners of those namespaces to have access to that particular secret, we instead want to manage that secret centrally.

It looks like it was possible with the legacy versions as I can see that the controller allows setting github app installation ID etc as CLI args, but these are ignored when running the controller in auto scaling runner mode.

Is this possible at all with AutoscalingRunnerSets?

[lacarvalho91]

Closing in favour of #3693