@cloudsnorkel/cdk-github-runners 0.7.1 → 0.7.3

package/.jsii

@@ -3114,7 +3114,7 @@
     "stability": "experimental"
   },
   "homepage": "https://github.com/CloudSnorkel/cdk-github-runners.git",
-  "jsiiVersion": "1.71.0 (build f1f58ae)",
+  "jsiiVersion": "1.72.0 (build 4b8828b)",
   "keywords": [
     "aws",
     "aws-cdk",
@@ -3138,7 +3138,7 @@
   },
   "name": "@cloudsnorkel/cdk-github-runners",
   "readme": {
-    "markdown": "# GitHub Self-Hosted Runners CDK Constructs\n\n[![NPM](https://img.shields.io/npm/v/@cloudsnorkel/cdk-github-runners?label=npm&logo=npm)][7]\n[![PyPI](https://img.shields.io/pypi/v/cloudsnorkel.cdk-github-runners?label=pypi&logo=pypi)][6]\n[![Maven Central](https://img.shields.io/maven-central/v/com.cloudsnorkel/cdk.github.runners.svg?label=Maven%20Central&logo=java)][8]\n[![Go](https://img.shields.io/github/v/tag/CloudSnorkel/cdk-github-runners?color=red&label=go&logo=go)][11]\n[![Nuget](https://img.shields.io/nuget/v/CloudSnorkel.Cdk.Github.Runners?color=red&&logo=nuget)][12]\n[![Release](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml/badge.svg)](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml)\n[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/CloudSnorkel/cdk-github-runners/blob/main/LICENSE)\n\nUse this CDK construct to create ephemeral [self-hosted GitHub runners][1] on-demand inside your AWS account.\n\n* Easy to configure GitHub integration with a web-based interface\n* Customizable runners with decent defaults\n* Multiple runner configurations controlled by labels\n* Everything fully hosted in your account\n* Automatically updated build environment with latest runner version\n\nSelf-hosted runners in AWS are useful when:\n\n* You need easy access to internal resources in your actions\n* You want to pre-install some software for your actions\n* You want to provide some basic AWS API access (but [aws-actions/configure-aws-credentials][2] has more security controls)\n\nEphemeral (or on-demand) runners are the [recommended way by GitHub][14] for auto-scaling, and they make sure all jobs run with a clean image. Runners are started on-demand. You don't pay unless a job is running.\n\n## API\n\nThe best way to browse API documentation is on [Constructs Hub][13]. It is available in all supported programming languages.\n\n## Providers\n\nA runner provider creates compute resources on-demand and uses [actions/runner][5] to start a runner.\n\n|                  | EC2               | CodeBuild                  | Fargate        | Lambda        |\n|------------------|-------------------|----------------------------|----------------|---------------|\n| **Time limit**   | Unlimited         | 8 hours                    | Unlimited      | 15 minutes    |\n| **vCPUs**        | Unlimited         | 2, 4, 8, or 72             | 0.25 to 4      | 1 to 6        |\n| **RAM**          | Unlimited         | 3gb, 7gb, 15gb, or 145gb   | 512mb to 30gb  | 128mb to 10gb |\n| **Storage**      | Unlimited         | 50gb to 824gb              | 20gb to 200gb  | Up to 10gb    |\n| **Architecture** | x86_64, ARM64     | x86_64, ARM64              | x86_64, ARM64  | x86_64, ARM64 |\n| **sudo**         | ✔                 | ✔                         | ✔              | ❌           |\n| **Docker**       | ✔                 | ✔ (Linux only)            | ❌              | ❌           |\n| **Spot pricing** | ✔                 | ❌                         | ✔              | ❌           |\n| **OS**           | Linux, Windows    | Linux, Windows             | Linux, Windows | Linux         |\n\nThe best provider to use mostly depends on your current infrastructure. When in doubt, CodeBuild is always a good choice. Execution history and logs are easy to view, and it has no restrictive limits unless you need to run for more than 8 hours.\n\nYou can also create your own provider by implementing `IRunnerProvider`.\n\n## Installation\n\n1. Confirm you're using CDK v2\n2. Install the appropriate package\n   1. [Python][6]\n      ```\n      pip install cloudsnorkel.cdk-github-runners\n      ```\n   2. [TypeScript or JavaScript][7]\n      ```\n      npm i @cloudsnorkel/cdk-github-runners\n      ```\n   3. [Java][8]\n      ```xml\n      <dependency>\n      <groupId>com.cloudsnorkel</groupId>\n      <artifactId>cdk.github.runners</artifactId>\n      </dependency>\n      ```\n   4. [Go][11]\n      ```\n      go get github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n      ```\n   5. [.NET][12]\n      ```\n      dotnet add package CloudSnorkel.Cdk.Github.Runners\n      ```\n3. Use `GitHubRunners` construct in your code (starting with default arguments is fine)\n4. Deploy your stack\n5. Look for the status command output similar to `aws --region us-east-1 lambda invoke --function-name status-XYZ123 status.json`\n6. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file\n7. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token\n8. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK\n9. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar\n10. If the action is not successful, see [troubleshooting](#Troubleshooting)\n\n[![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)\n\n## Customizing\n\nThe default providers configured by `GitHubRunners` are useful for testing but probably not too much for actual production work. They run in the default VPC or no VPC and have no added IAM permissions. You would usually want to configure the providers yourself.\n\nFor example:\n\n```typescript\nlet vpc: ec2.Vpc;\nlet runnerSg: ec2.SecurityGroup;\nlet dbSg: ec2.SecurityGroup;\nlet bucket: s3.Bucket;\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(this, 'codebuild runner', {\n  label: 'my-codebuild',\n  vpc: vpc,\n  securityGroup: runnerSg,\n});\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(this, 'runners', {\n   providers: [myProvider],\n});\n```\n\nAnother way to customize runners is by modifying the image used to spin them up. The image contains the [runner][5], any required dependencies, and integration code with the provider. You may choose to customize this image by adding more packages, for example.\n\n```typescript\nconst myBuilder = new CodeBuildImageBuilder(this, 'image builder', {\n  dockerfilePath: FargateRunner.LINUX_X64_DOCKERFILE_PATH,\n  runnerVersion: RunnerVersion.specific('2.291.0'),\n  rebuildInterval: Duration.days(14),\n});\nmyBuilder.setBuildArg('EXTRA_PACKAGES', 'nginx xz-utils');\n\nconst myProvider = new FargateRunner(this, 'fargate runner', {\n  label: 'customized-fargate',\n  vpc: vpc,\n  securityGroup: runnerSg,\n  imageBuilder: myBuilder,\n});\n\n// create the runner infrastructure\nnew GitHubRunners(stack, 'runners', {\n  providers: [myProvider],\n});\n```\n\nYour workflow will then look like:\n\n```yaml\nname: self-hosted example\non: push\njobs:\n  self-hosted:\n    runs-on: [self-hosted, customized-fargate]\n    steps:\n      - run: echo hello world\n```\n\nWindows images must be built with AWS Image Builder.\n\n```typescript\nconst myWindowsBuilder = new ContainerImageBuilder(this, 'Windows image builder', {\n  architecture: Architecture.X86_64,\n  os: Os.WINDOWS,\n  runnerVersion: RunnerVersion.specific('2.291.0'),\n  rebuildInterval: Duration.days(14),\n});\nmyWindowsBuilder.addComponent(new ImageBuilderComponent(this, 'Ninja Component',\n  {\n    displayName: 'Ninja',\n    description: 'Download and install Ninja build system',\n    platform: 'Windows',\n    commands: [\n      'Invoke-WebRequest -UseBasicParsing -Uri \"https://github.com/ninja-build/ninja/releases/download/v1.11.1/ninja-win.zip\" -OutFile ninja.zip',\n      'Expand-Archive ninja.zip -DestinationPath C:\\\\actions',\n      'del ninja.zip',\n    ],\n  }\n));\n\nconst myProvider = new FargateRunner(this, 'fargate runner', {\n  label: 'customized-windows-fargate',\n  vpc: vpc,\n  securityGroup: runnerSg,\n  imageBuiler: myWindowsBuilder,\n});\n\n// create the runner infrastructure\nnew GitHubRunners(stack, 'runners', {\n  providers: [myProvider],\n});\n```\n\n## Architecture\n\n![Architecture diagram](architecture.svg)\n\n## Troubleshooting\n\n1. Always start with the status function, make sure no errors are reported, and confirm all status codes are OK\n2. If jobs are stuck on pending:\n   1. Make sure `runs-on` in the workflow matches the expected labels set in the runner provider\n   2. If it happens every time, cancel the job and start it again\n4. Confirm the webhook Lambda was called by visiting the URL in `troubleshooting.webhookHandlerUrl` from `status.json`\n   1. If it's not called or logs errors, confirm the webhook settings on the GitHub side\n   2. If you see too many errors, make sure you're only sending `workflow_job` events\n5. When using GitHub app, make sure there are active installation in `github.auth.app.installations`\n6. Check execution details of the orchestrator step function by visiting the URL in `troubleshooting.stepFunctionUrl` from `status.json`\n   1. Use the details tab to find the specific execution of the provider (Lambda, CodeBuild, Fargate, etc.)\n   2. Every step function execution should be successful, even if the runner action inside it failed\n\n## Other Options\n\n1. [philips-labs/terraform-aws-github-runner][3] if you're using Terraform\n2. [actions-runner-controller/actions-runner-controller][4] if you're using Kubernetes\n\n\n[1]: https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\n[2]: https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions\n[3]: https://github.com/philips-labs/terraform-aws-github-runner\n[4]: https://github.com/actions-runner-controller/actions-runner-controller\n[5]: https://github.com/actions/runner\n[6]: https://pypi.org/project/cloudsnorkel.cdk-github-runners\n[7]: https://www.npmjs.com/package/@cloudsnorkel/cdk-github-runners\n[8]: https://search.maven.org/search?q=g:%22com.cloudsnorkel%22%20AND%20a:%22cdk.github.runners%22\n[9]: https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps\n[10]: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token\n[11]: https://pkg.go.dev/github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n[12]: https://www.nuget.org/packages/CloudSnorkel.Cdk.Github.Runners/\n[13]: https://constructs.dev/packages/@cloudsnorkel/cdk-github-runners/\n[14]: https://docs.github.com/en/actions/hosting-your-own-runners/autoscaling-with-self-hosted-runners#using-ephemeral-runners-for-autoscaling\n"
+    "markdown": "# GitHub Self-Hosted Runners CDK Constructs\n\n[![NPM](https://img.shields.io/npm/v/@cloudsnorkel/cdk-github-runners?label=npm&logo=npm)][7]\n[![PyPI](https://img.shields.io/pypi/v/cloudsnorkel.cdk-github-runners?label=pypi&logo=pypi)][6]\n[![Maven Central](https://img.shields.io/maven-central/v/com.cloudsnorkel/cdk.github.runners.svg?label=Maven%20Central&logo=java)][8]\n[![Go](https://img.shields.io/github/v/tag/CloudSnorkel/cdk-github-runners?color=red&label=go&logo=go)][11]\n[![Nuget](https://img.shields.io/nuget/v/CloudSnorkel.Cdk.Github.Runners?color=red&&logo=nuget)][12]\n[![Release](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml/badge.svg)](https://github.com/CloudSnorkel/cdk-github-runners/actions/workflows/release.yml)\n[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](https://github.com/CloudSnorkel/cdk-github-runners/blob/main/LICENSE)\n\nUse this CDK construct to create ephemeral [self-hosted GitHub runners][1] on-demand inside your AWS account.\n\n* Easy to configure GitHub integration with a web-based interface\n* Customizable runners with decent defaults\n* Multiple runner configurations controlled by labels\n* Everything fully hosted in your account\n* Automatically updated build environment with latest runner version\n\nSelf-hosted runners in AWS are useful when:\n\n* You need easy access to internal resources in your actions\n* You want to pre-install some software for your actions\n* You want to provide some basic AWS API access (but [aws-actions/configure-aws-credentials][2] has more security controls)\n\nEphemeral (or on-demand) runners are the [recommended way by GitHub][14] for auto-scaling, and they make sure all jobs run with a clean image. Runners are started on-demand. You don't pay unless a job is running.\n\n## API\n\nThe best way to browse API documentation is on [Constructs Hub][13]. It is available in all supported programming languages.\n\n## Providers\n\nA runner provider creates compute resources on-demand and uses [actions/runner][5] to start a runner.\n\n|                  | EC2               | CodeBuild                  | Fargate        | Lambda        |\n|------------------|-------------------|----------------------------|----------------|---------------|\n| **Time limit**   | Unlimited         | 8 hours                    | Unlimited      | 15 minutes    |\n| **vCPUs**        | Unlimited         | 2, 4, 8, or 72             | 0.25 to 4      | 1 to 6        |\n| **RAM**          | Unlimited         | 3gb, 7gb, 15gb, or 145gb   | 512mb to 30gb  | 128mb to 10gb |\n| **Storage**      | Unlimited         | 50gb to 824gb              | 20gb to 200gb  | Up to 10gb    |\n| **Architecture** | x86_64, ARM64     | x86_64, ARM64              | x86_64, ARM64  | x86_64, ARM64 |\n| **sudo**         | ✔                 | ✔                         | ✔              | ❌           |\n| **Docker**       | ✔                 | ✔ (Linux only)            | ❌              | ❌           |\n| **Spot pricing** | ✔                 | ❌                         | ✔              | ❌           |\n| **OS**           | Linux, Windows    | Linux, Windows             | Linux, Windows | Linux         |\n\nThe best provider to use mostly depends on your current infrastructure. When in doubt, CodeBuild is always a good choice. Execution history and logs are easy to view, and it has no restrictive limits unless you need to run for more than 8 hours.\n\nYou can also create your own provider by implementing `IRunnerProvider`.\n\n## Installation\n\n1. Confirm you're using CDK v2\n2. Install the appropriate package\n   1. [Python][6]\n      ```\n      pip install cloudsnorkel.cdk-github-runners\n      ```\n   2. [TypeScript or JavaScript][7]\n      ```\n      npm i @cloudsnorkel/cdk-github-runners\n      ```\n   3. [Java][8]\n      ```xml\n      <dependency>\n      <groupId>com.cloudsnorkel</groupId>\n      <artifactId>cdk.github.runners</artifactId>\n      </dependency>\n      ```\n   4. [Go][11]\n      ```\n      go get github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n      ```\n   5. [.NET][12]\n      ```\n      dotnet add package CloudSnorkel.Cdk.Github.Runners\n      ```\n3. Use `GitHubRunners` construct in your code (starting with default arguments is fine)\n4. Deploy your stack\n5. Look for the status command output similar to `aws --region us-east-1 lambda invoke --function-name status-XYZ123 status.json`\n6. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file\n7. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token\n8. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK\n9. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar\n10. If the action is not successful, see [troubleshooting](#Troubleshooting)\n\n[![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)\n\n## Customizing\n\nThe default providers configured by `GitHubRunners` are useful for testing but probably not too much for actual production work. They run in the default VPC or no VPC and have no added IAM permissions. You would usually want to configure the providers yourself.\n\nFor example:\n\n```typescript\nlet vpc: ec2.Vpc;\nlet runnerSg: ec2.SecurityGroup;\nlet dbSg: ec2.SecurityGroup;\nlet bucket: s3.Bucket;\n\n// create a custom CodeBuild provider\nconst myProvider = new CodeBuildRunner(this, 'codebuild runner', {\n  label: 'my-codebuild',\n  vpc: vpc,\n  securityGroup: runnerSg,\n});\n// grant some permissions to the provider\nbucket.grantReadWrite(myProvider);\ndbSg.connections.allowFrom(runnerSg, ec2.Port.tcp(3306), 'allow runners to connect to MySQL database');\n\n// create the runner infrastructure\nnew GitHubRunners(this, 'runners', {\n   providers: [myProvider],\n});\n```\n\nAnother way to customize runners is by modifying the image used to spin them up. The image contains the [runner][5], any required dependencies, and integration code with the provider. You may choose to customize this image by adding more packages, for example.\n\n```typescript\nconst myBuilder = new CodeBuildImageBuilder(this, 'image builder', {\n  dockerfilePath: FargateRunner.LINUX_X64_DOCKERFILE_PATH,\n  runnerVersion: RunnerVersion.specific('2.291.0'),\n  rebuildInterval: Duration.days(14),\n});\nmyBuilder.setBuildArg('EXTRA_PACKAGES', 'nginx xz-utils');\n\nconst myProvider = new FargateRunner(this, 'fargate runner', {\n  label: 'customized-fargate',\n  vpc: vpc,\n  securityGroup: runnerSg,\n  imageBuilder: myBuilder,\n});\n\n// create the runner infrastructure\nnew GitHubRunners(stack, 'runners', {\n  providers: [myProvider],\n});\n```\n\nYour workflow will then look like:\n\n```yaml\nname: self-hosted example\non: push\njobs:\n  self-hosted:\n    runs-on: [self-hosted, customized-fargate]\n    steps:\n      - run: echo hello world\n```\n\nWindows images must be built with AWS Image Builder.\n\n```typescript\nconst myWindowsBuilder = new ContainerImageBuilder(this, 'Windows image builder', {\n  architecture: Architecture.X86_64,\n  os: Os.WINDOWS,\n  runnerVersion: RunnerVersion.specific('2.291.0'),\n  rebuildInterval: Duration.days(14),\n});\nmyWindowsBuilder.addComponent(new ImageBuilderComponent(this, 'Ninja Component',\n  {\n    displayName: 'Ninja',\n    description: 'Download and install Ninja build system',\n    platform: 'Windows',\n    commands: [\n      'Invoke-WebRequest -UseBasicParsing -Uri \"https://github.com/ninja-build/ninja/releases/download/v1.11.1/ninja-win.zip\" -OutFile ninja.zip',\n      'Expand-Archive ninja.zip -DestinationPath C:\\\\actions',\n      'del ninja.zip',\n    ],\n  }\n));\n\nconst myProvider = new FargateRunner(this, 'fargate runner', {\n  label: 'customized-windows-fargate',\n  vpc: vpc,\n  securityGroup: runnerSg,\n  imageBuiler: myWindowsBuilder,\n});\n\n// create the runner infrastructure\nnew GitHubRunners(stack, 'runners', {\n  providers: [myProvider],\n});\n```\n\n## Architecture\n\n![Architecture diagram](architecture.svg)\n\n## Troubleshooting\n\n1. Always start with the status function, make sure no errors are reported, and confirm all status codes are OK\n2. If jobs are stuck on pending:\n   1. Make sure `runs-on` in the workflow matches the expected labels set in the runner provider\n   2. If it happens every time, cancel the job and start it again\n4. Confirm the webhook Lambda was called by visiting the URL in `troubleshooting.webhookHandlerUrl` from `status.json`\n   1. If it's not called or logs errors, confirm the webhook settings on the GitHub side\n   2. If you see too many errors, make sure you're only sending `workflow_job` events\n5. When using GitHub app, make sure there are active installation in `github.auth.app.installations`\n6. Check execution details of the orchestrator step function by visiting the URL in `troubleshooting.stepFunctionUrl` from `status.json`\n   1. Use the details tab to find the specific execution of the provider (Lambda, CodeBuild, Fargate, etc.)\n   2. Every step function execution should be successful, even if the runner action inside it failed\n\n## Other Options\n\n1. [philips-labs/terraform-aws-github-runner][3] if you're using Terraform\n2. [actions/actions-runner-controller][4] if you're using Kubernetes\n\n\n[1]: https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\n[2]: https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions\n[3]: https://github.com/philips-labs/terraform-aws-github-runner\n[4]: https://github.com/actions/actions-runner-controller\n[5]: https://github.com/actions/runner\n[6]: https://pypi.org/project/cloudsnorkel.cdk-github-runners\n[7]: https://www.npmjs.com/package/@cloudsnorkel/cdk-github-runners\n[8]: https://search.maven.org/search?q=g:%22com.cloudsnorkel%22%20AND%20a:%22cdk.github.runners%22\n[9]: https://docs.github.com/en/developers/apps/getting-started-with-apps/about-apps\n[10]: https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token\n[11]: https://pkg.go.dev/github.com/CloudSnorkel/cdk-github-runners-go/cloudsnorkelcdkgithubrunners\n[12]: https://www.nuget.org/packages/CloudSnorkel.Cdk.Github.Runners/\n[13]: https://constructs.dev/packages/@cloudsnorkel/cdk-github-runners/\n[14]: https://docs.github.com/en/actions/hosting-your-own-runners/autoscaling-with-self-hosted-runners#using-ephemeral-runners-for-autoscaling\n"
   },
   "repository": {
     "type": "git",
@@ -3169,6 +3169,629 @@
     }
   },
   "types": {
+    "@cloudsnorkel/cdk-github-runners.AmiBuilder": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "base": "constructs.Construct",
+      "docs": {
+        "remarks": "Builders can be used with {@link Ec2Runner}.\n\nEach builder re-runs automatically at a set interval to make sure the AMIs contain the latest versions of everything.\n\nYou can create an instance of this construct to customize the AMI used to spin-up runners. Some runner providers may require custom components. Check the runner provider documentation.\n\nFor example, to set a specific runner version, rebuild the image every 2 weeks, and add a few packages for the EC2 provider, use:\n\n```\nconst builder = new AmiBuilder(this, 'Builder', {\n     runnerVersion: RunnerVersion.specific('2.293.0'),\n     rebuildInterval: Duration.days(14),\n});\nbuilder.addComponent(new ImageBuilderComponent(scope, id, {\n   platform: 'Linux',\n   displayName: 'p7zip',\n   description: 'Install some more packages',\n   commands: [\n     'set -ex',\n     'apt-get install p7zip',\n   ],\n}));\nnew Ec2Runner(this, 'EC2 provider', {\n     label: 'custom-ec2',\n     amiBuilder: builder,\n});\n```",
+        "stability": "experimental",
+        "summary": "An AMI builder that uses AWS Image Builder to build AMIs pre-baked with all the GitHub Actions runner requirements."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.AmiBuilder",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "src/providers/image-builders/ami.ts",
+          "line": 223
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "optional": true,
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.AmiBuilderProps"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@cloudsnorkel/cdk-github-runners.IAmiBuilder",
+        "aws-cdk-lib.aws_ec2.IConnectable"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "src/providers/image-builders/ami.ts",
+        "line": 220
+      },
+      "methods": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Add a component to be installed."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 285
+          },
+          "name": "addComponent",
+          "parameters": [
+            {
+              "name": "component",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.ImageBuilderComponent"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "remarks": "This helps deal with self-signed certificates for GitHub Enterprise Server.",
+            "stability": "experimental",
+            "summary": "Add extra trusted certificates."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 300
+          },
+          "name": "addExtraCertificates",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "path to directory containing a file called certs.pem containing all the required certificates."
+              },
+              "name": "path",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ]
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Called by IRunnerProvider to finalize settings and create the AMI builder."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 313
+          },
+          "name": "bind",
+          "overrides": "@cloudsnorkel/cdk-github-runners.IAmiBuilder",
+          "returns": {
+            "type": {
+              "fqn": "@cloudsnorkel/cdk-github-runners.RunnerAmi"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 452
+          },
+          "name": "createImage",
+          "parameters": [
+            {
+              "name": "infra",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_imagebuilder.CfnInfrastructureConfiguration"
+              }
+            },
+            {
+              "name": "dist",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_imagebuilder.CfnDistributionConfiguration"
+              }
+            },
+            {
+              "name": "log",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_logs.LogGroup"
+              }
+            },
+            {
+              "name": "imageRecipeArn",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "containerRecipeArn",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "protected": true,
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_imagebuilder.CfnImage"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 428
+          },
+          "name": "createInfrastructure",
+          "parameters": [
+            {
+              "name": "managedPolicies",
+              "type": {
+                "collection": {
+                  "elementtype": {
+                    "fqn": "aws-cdk-lib.aws_iam.IManagedPolicy"
+                  },
+                  "kind": "array"
+                }
+              }
+            }
+          ],
+          "protected": true,
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_imagebuilder.CfnInfrastructureConfiguration"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 420
+          },
+          "name": "createLog",
+          "parameters": [
+            {
+              "name": "recipeName",
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "protected": true,
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_logs.LogGroup"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 469
+          },
+          "name": "createPipeline",
+          "parameters": [
+            {
+              "name": "infra",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_imagebuilder.CfnInfrastructureConfiguration"
+              }
+            },
+            {
+              "name": "dist",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_imagebuilder.CfnDistributionConfiguration"
+              }
+            },
+            {
+              "name": "log",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_logs.LogGroup"
+              }
+            },
+            {
+              "name": "imageRecipeArn",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "containerRecipeArn",
+              "optional": true,
+              "type": {
+                "primitive": "string"
+              }
+            }
+          ],
+          "protected": true,
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_imagebuilder.CfnImagePipeline"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "Useful for required system settings like certificates or proxy settings.",
+            "stability": "experimental",
+            "summary": "Add a component to be installed before any other components."
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 271
+          },
+          "name": "prependComponent",
+          "parameters": [
+            {
+              "name": "component",
+              "type": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.ImageBuilderComponent"
+              }
+            }
+          ]
+        }
+      ],
+      "name": "AmiBuilder",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 343
+          },
+          "name": "architecture",
+          "protected": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The network connections associated with this resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 499
+          },
+          "name": "connections",
+          "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.Connections"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 347
+          },
+          "name": "description",
+          "protected": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 344
+          },
+          "name": "os",
+          "protected": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 345
+          },
+          "name": "platform",
+          "protected": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 349
+          },
+          "name": "runnerVersion",
+          "protected": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.RunnerVersion"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental"
+          },
+          "locationInModule": {
+            "filename": "src/providers/image-builders/common.ts",
+            "line": 351
+          },
+          "name": "components",
+          "protected": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@cloudsnorkel/cdk-github-runners.ImageBuilderComponent"
+              },
+              "kind": "array"
+            }
+          }
+        }
+      ],
+      "symbolId": "src/providers/image-builders/ami:AmiBuilder"
+    },
+    "@cloudsnorkel/cdk-github-runners.AmiBuilderProps": {
+      "assembly": "@cloudsnorkel/cdk-github-runners",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for {@link AmiBuilder} construct."
+      },
+      "fqn": "@cloudsnorkel/cdk-github-runners.AmiBuilderProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "src/providers/image-builders/ami.ts",
+        "line": 24
+      },
+      "name": "AmiBuilderProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Architecture.X86_64",
+            "stability": "experimental",
+            "summary": "Image architecture."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 30
+          },
+          "name": "architecture",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Architecture"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "m5.large",
+            "stability": "experimental",
+            "summary": "The instance type used to build the image."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 90
+          },
+          "name": "instanceType",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.InstanceType"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "RemovalPolicy.DESTROY",
+            "remarks": "If deployment fails on the custom resource, try setting this to `RemovalPolicy.RETAIN`. This way the logs can still be viewed, and you can see why the build failed.\n\nWe try to not leave anything behind when removed. But sometimes a log staying behind is useful.",
+            "stability": "experimental",
+            "summary": "Removal policy for logs of image builds."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 108
+          },
+          "name": "logRemovalPolicy",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.RemovalPolicy"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "logs.RetentionDays.ONE_MONTH",
+            "remarks": "When updating\nthis property, unsetting it doesn't remove the log retention policy. To\nremove the retention policy, set the value to `INFINITE`.",
+            "stability": "experimental",
+            "summary": "The number of days log events are kept in CloudWatch Logs."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 99
+          },
+          "name": "logRetention",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_logs.RetentionDays"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "OS.LINUX",
+            "stability": "experimental",
+            "summary": "Image OS."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 37
+          },
+          "name": "os",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.Os"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "Duration.days(7)",
+            "remarks": "Useful for keeping the AMI up-do-date with the latest GitHub runner version and latest OS updates.\n\nSet to zero to disable.",
+            "stability": "experimental",
+            "summary": "Schedule the AMI to be rebuilt every given interval."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 53
+          },
+          "name": "rebuildInterval",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "latest version available",
+            "stability": "experimental",
+            "summary": "Version of GitHub Runners to install."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 44
+          },
+          "name": "runnerVersion",
+          "optional": true,
+          "type": {
+            "fqn": "@cloudsnorkel/cdk-github-runners.RunnerVersion"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "new security group",
+            "deprecated": "use {@link securityGroups}",
+            "stability": "deprecated",
+            "summary": "Security group to assign to launched builder instances."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 69
+          },
+          "name": "securityGroup",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "new security group",
+            "stability": "experimental",
+            "summary": "Security groups to assign to launched builder instances."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 76
+          },
+          "name": "securityGroups",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "aws-cdk-lib.aws_ec2.ISecurityGroup"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "default VPC subnet",
+            "remarks": "Only the first matched subnet will be used.",
+            "stability": "experimental",
+            "summary": "Where to place the network interfaces within the VPC."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 83
+          },
+          "name": "subnetSelection",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.SubnetSelection"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "default account VPC",
+            "stability": "experimental",
+            "summary": "VPC where builder instances will be launched."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "src/providers/image-builders/ami.ts",
+            "line": 60
+          },
+          "name": "vpc",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_ec2.IVpc"
+          }
+        }
+      ],
+      "symbolId": "src/providers/image-builders/ami:AmiBuilderProps"
+    },
     "@cloudsnorkel/cdk-github-runners.Architecture": {
       "assembly": "@cloudsnorkel/cdk-github-runners",
       "docs": {
@@ -5101,7 +5724,7 @@
           },
           "locationInModule": {
             "filename": "src/providers/ec2.ts",
-            "line": 388
+            "line": 398
           },
           "name": "status",
           "overrides": "@cloudsnorkel/cdk-github-runners.IRunnerProvider",
@@ -5130,7 +5753,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "src/providers/ec2.ts",
-            "line": 409
+            "line": 419
           },
           "name": "connections",
           "overrides": "aws-cdk-lib.aws_ec2.IConnectable",
@@ -9013,6 +9636,6 @@
       "symbolId": "src/providers/image-builders/windows-components:WindowsComponents"
     }
   },
-  "version": "0.7.1",
-  "fingerprint": "nV06UyftJlEK3eahLrUS/kkWduUHm+k6O9W1v2jTDX4="
+  "version": "0.7.3",
+  "fingerprint": "xPWdoNfKSGVKcKTiEloeQG2OqIVYuyBDS2Zi4uSFYTk="
 }