Skip to content

ci: probe GitHub runner reachability to OpenShift API and router - #55

Merged
DerekRoberts merged 3 commits into
mainfrom
ci/probe-runner-reachability
Sep 29, 2026
Merged

DerekRoberts merged 3 commits into
mainfrom
ci/probe-runner-reachability

Conversation

@DerekRoberts

@DerekRoberts DerekRoberts commented Sep 27, 2026 •

Copy link
Copy Markdown
Member

Adds a standalone workflow that samples GitHub-hosted runner egress IPs and records, per runner:

  • egress IP
  • whether api.gold / api.silver :6443/version answer (3 attempts each)
  • whether the silver router (console.apps.silver…:443) still answers while the API does not

Runs every 6h (17 */6 * * *), on workflow_dispatch, and on PRs touching this file. 20 samples per run; a summary job tabulates results in the step summary and each sample uploads a JSON artifact. permissions: {}, no secrets, no cluster credentials.

Origin: the reachability probe stashed in action-oc-runner (feat/https-proxy WIP), reworked as a scheduled data collector.

Failure notification: the summary job fails when any sample has the API blocked or a probe job failed. On scheduled/manual runs it then opens (or comments on) the issue "Runner reachability probe: OpenShift API blocked" via bcgov/actions/workflow-notifier. PR runs never notify. Adds .github/CODEOWNERS (* @DerekRoberts, same as bcgov/actions) so the notifier has an owner.

Refs #49

Copilot AI balanced review requested due to automatic review settings September 27, 2026 20:32

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

The router metric can incorrectly report silver API blockage when only the gold API is unreachable.

Review effort: Balanced
Findings: 1 Medium severity

Open (1)
What changed in this PR

Adds a scheduled workflow to sample GitHub-hosted runner connectivity to OpenShift endpoints.

Changes:

  • Runs 20 connectivity probes every six hours or on demand.
  • Uploads per-sample JSON artifacts and generates a summary table.
File Description
.github/​workflows/​probe-runner-reachability.yml Defines probe, artifact, and summary jobs.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .github/workflows/probe-runner-reachability.yml Outdated
@DerekRoberts DerekRoberts moved this to Active in DevOps (NR) Sep 27, 2026
@DerekRoberts DerekRoberts self-assigned this Sep 27, 2026
@DerekRoberts
DerekRoberts merged commit aa74b9e into main Sep 29, 2026
29 checks passed
@DerekRoberts
DerekRoberts deleted the ci/probe-runner-reachability branch September 29, 2026 05:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

2 participants