cloudsnorkel.cdk-github-runners 0.14.4__tar.gz → 0.14.6__tar.gz

{cloudsnorkel_cdk_github_runners-0.14.4/src/cloudsnorkel.cdk_github_runners.egg-info → cloudsnorkel_cdk_github_runners-0.14.6}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.1
 Name: cloudsnorkel.cdk-github-runners
-Version: 0.14.4
-Summary: CDK construct to create GitHub Actions self-hosted runners. A webhook listens to events and creates ephemeral runners on the fly.
+Version: 0.14.6
+Summary: CDK construct to create GitHub Actions self-hosted runners. Creates ephemeral runners on demand. Easy to deploy and highly customizable.
 Home-page: https://github.com/CloudSnorkel/cdk-github-runners.git
 Author: Amir Szekely<amir@cloudsnorkel.com>
 License: Apache-2.0
@@ -22,9 +22,9 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: aws-cdk-lib<3.0.0,>=2.155.0
 Requires-Dist: constructs<11.0.0,>=10.0.5
-Requires-Dist: jsii<2.0.0,>=1.103.1
+Requires-Dist: jsii<2.0.0,>=1.104.0
 Requires-Dist: publication>=0.0.3
-Requires-Dist: typeguard<5.0.0,>=2.13.3
+Requires-Dist: typeguard<4.3.0,>=2.13.3
 
 # GitHub Self-Hosted Runners CDK Constructs
 
@@ -243,7 +243,7 @@ You can also create your own provider by implementing `IRunnerProvider`.
 5. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file
 6. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token
 7. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK
-8. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar
+8. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, codebuild]` (or non-default labels you set in step 2)
 9. If the action is not successful, see [troubleshooting](#Troubleshooting)
 
 [![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)

{cloudsnorkel_cdk_github_runners-0.14.4 → cloudsnorkel_cdk_github_runners-0.14.6}/README.md

@@ -215,7 +215,7 @@ You can also create your own provider by implementing `IRunnerProvider`.
 5. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file
 6. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token
 7. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK
-8. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar
+8. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, codebuild]` (or non-default labels you set in step 2)
 9. If the action is not successful, see [troubleshooting](#Troubleshooting)
 
 [![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)

{cloudsnorkel_cdk_github_runners-0.14.4 → cloudsnorkel_cdk_github_runners-0.14.6}/setup.py

@@ -5,8 +5,8 @@ kwargs = json.loads(
     """
 {
     "name": "cloudsnorkel.cdk-github-runners",
-    "version": "0.14.4",
-    "description": "CDK construct to create GitHub Actions self-hosted runners. A webhook listens to events and creates ephemeral runners on the fly.",
+    "version": "0.14.6",
+    "description": "CDK construct to create GitHub Actions self-hosted runners. Creates ephemeral runners on demand. Easy to deploy and highly customizable.",
     "license": "Apache-2.0",
     "url": "https://github.com/CloudSnorkel/cdk-github-runners.git",
     "long_description_content_type": "text/markdown",
@@ -26,7 +26,7 @@ kwargs = json.loads(
     ],
     "package_data": {
         "cloudsnorkel.cdk_github_runners._jsii": [
-            "cdk-github-runners@0.14.4.jsii.tgz"
+            "cdk-github-runners@0.14.6.jsii.tgz"
         ],
         "cloudsnorkel.cdk_github_runners": [
             "py.typed"
@@ -36,9 +36,9 @@ kwargs = json.loads(
     "install_requires": [
         "aws-cdk-lib>=2.155.0, <3.0.0",
         "constructs>=10.0.5, <11.0.0",
-        "jsii>=1.103.1, <2.0.0",
+        "jsii>=1.104.0, <2.0.0",
         "publication>=0.0.3",
-        "typeguard>=2.13.3,<5.0.0"
+        "typeguard>=2.13.3,<4.3.0"
     ],
     "classifiers": [
         "Intended Audience :: Developers",

{cloudsnorkel_cdk_github_runners-0.14.4 → cloudsnorkel_cdk_github_runners-0.14.6}/src/cloudsnorkel/cdk_github_runners/__init__.py

@@ -216,7 +216,7 @@ You can also create your own provider by implementing `IRunnerProvider`.
 5. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file
 6. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token
 7. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK
-8. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar
+8. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, codebuild]` (or non-default labels you set in step 2)
 9. If the action is not successful, see [troubleshooting](#Troubleshooting)
 
 [![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)
@@ -3489,6 +3489,7 @@ class LambdaRunnerProvider(
         id: builtins.str,
         *,
         ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -3505,6 +3506,7 @@ class LambdaRunnerProvider(
         :param scope: -
         :param id: -
         :param ephemeral_storage_size: (experimental) The size of the function’s /tmp directory in MiB. Default: 10 GiB
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder must contain the {@link RunnerImageComponent.lambdaEntrypoint} component. The image builder determines the OS and architecture of the runner. Default: LambdaRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['lambda']
@@ -3525,6 +3527,7 @@ class LambdaRunnerProvider(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = LambdaRunnerProviderProps(
             ephemeral_storage_size=ephemeral_storage_size,
+            group=group,
             image_builder=image_builder,
             label=label,
             labels=labels,
@@ -6619,6 +6622,7 @@ class CodeBuildRunnerProvider(
         *,
         compute_type: typing.Optional[_aws_cdk_aws_codebuild_ceddda9d.ComputeType] = None,
         docker_in_docker: typing.Optional[builtins.bool] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -6635,6 +6639,7 @@ class CodeBuildRunnerProvider(
         :param id: -
         :param compute_type: (experimental) The type of compute to use for this build. See the {@link ComputeType} enum for the possible values. Default: {@link ComputeType#SMALL }
         :param docker_in_docker: (experimental) Support building and running Docker images by enabling Docker-in-Docker (dind) and the required CodeBuild privileged mode. Disabling this can speed up provisioning of CodeBuild runners. If you don't intend on running or building Docker images, disable this for faster start-up times. Default: true
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder must contain the {@link RunnerImageComponent.docker} component unless ``dockerInDocker`` is set to false. The image builder determines the OS and architecture of the runner. Default: CodeBuildRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['codebuild']
@@ -6655,6 +6660,7 @@ class CodeBuildRunnerProvider(
         props = CodeBuildRunnerProviderProps(
             compute_type=compute_type,
             docker_in_docker=docker_in_docker,
+            group=group,
             image_builder=image_builder,
             label=label,
             labels=labels,
@@ -6970,6 +6976,7 @@ class CodeBuildRunnerProvider(
         "retry_options": "retryOptions",
         "compute_type": "computeType",
         "docker_in_docker": "dockerInDocker",
+        "group": "group",
         "image_builder": "imageBuilder",
         "label": "label",
         "labels": "labels",
@@ -6988,6 +6995,7 @@ class CodeBuildRunnerProviderProps(RunnerProviderProps):
         retry_options: typing.Optional[typing.Union[ProviderRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         compute_type: typing.Optional[_aws_cdk_aws_codebuild_ceddda9d.ComputeType] = None,
         docker_in_docker: typing.Optional[builtins.bool] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -7002,6 +7010,7 @@ class CodeBuildRunnerProviderProps(RunnerProviderProps):
         :param retry_options: 
         :param compute_type: (experimental) The type of compute to use for this build. See the {@link ComputeType} enum for the possible values. Default: {@link ComputeType#SMALL }
         :param docker_in_docker: (experimental) Support building and running Docker images by enabling Docker-in-Docker (dind) and the required CodeBuild privileged mode. Disabling this can speed up provisioning of CodeBuild runners. If you don't intend on running or building Docker images, disable this for faster start-up times. Default: true
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder must contain the {@link RunnerImageComponent.docker} component unless ``dockerInDocker`` is set to false. The image builder determines the OS and architecture of the runner. Default: CodeBuildRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['codebuild']
@@ -7023,6 +7032,7 @@ class CodeBuildRunnerProviderProps(RunnerProviderProps):
             check_type(argname="argument retry_options", value=retry_options, expected_type=type_hints["retry_options"])
             check_type(argname="argument compute_type", value=compute_type, expected_type=type_hints["compute_type"])
             check_type(argname="argument docker_in_docker", value=docker_in_docker, expected_type=type_hints["docker_in_docker"])
+            check_type(argname="argument group", value=group, expected_type=type_hints["group"])
             check_type(argname="argument image_builder", value=image_builder, expected_type=type_hints["image_builder"])
             check_type(argname="argument label", value=label, expected_type=type_hints["label"])
             check_type(argname="argument labels", value=labels, expected_type=type_hints["labels"])
@@ -7040,6 +7050,8 @@ class CodeBuildRunnerProviderProps(RunnerProviderProps):
             self._values["compute_type"] = compute_type
         if docker_in_docker is not None:
             self._values["docker_in_docker"] = docker_in_docker
+        if group is not None:
+            self._values["group"] = group
         if image_builder is not None:
             self._values["image_builder"] = image_builder
         if label is not None:
@@ -7113,6 +7125,24 @@ class CodeBuildRunnerProviderProps(RunnerProviderProps):
         result = self._values.get("docker_in_docker")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def group(self) -> typing.Optional[builtins.str]:
+        '''(experimental) GitHub Actions runner group name.
+
+        If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It
+        requires a paid GitHub account.
+
+        The group must exist or the runner will not start.
+
+        Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group.
+
+        :default: undefined
+
+        :stability: experimental
+        '''
+        result = self._values.get("group")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def image_builder(self) -> typing.Optional[IRunnerImageBuilder]:
         '''(experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements.
@@ -7562,6 +7592,7 @@ class Ec2RunnerProvider(
         id: builtins.str,
         *,
         ami_builder: typing.Optional[IRunnerImageBuilder] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -7581,6 +7612,7 @@ class Ec2RunnerProvider(
         :param scope: -
         :param id: -
         :param ami_builder: 
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build AMI containing GitHub Runner and all requirements. The image builder determines the OS and architecture of the runner. Default: Ec2RunnerProvider.imageBuilder()
         :param instance_type: (experimental) Instance type for launched runner instances. Default: m6i.large
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['ec2']
@@ -7604,6 +7636,7 @@ class Ec2RunnerProvider(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = Ec2RunnerProviderProps(
             ami_builder=ami_builder,
+            group=group,
             image_builder=image_builder,
             instance_type=instance_type,
             labels=labels,
@@ -7861,6 +7894,7 @@ class Ec2RunnerProvider(
         "log_retention": "logRetention",
         "retry_options": "retryOptions",
         "ami_builder": "amiBuilder",
+        "group": "group",
         "image_builder": "imageBuilder",
         "instance_type": "instanceType",
         "labels": "labels",
@@ -7882,6 +7916,7 @@ class Ec2RunnerProviderProps(RunnerProviderProps):
         log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
         retry_options: typing.Optional[typing.Union[ProviderRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         ami_builder: typing.Optional[IRunnerImageBuilder] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -7900,6 +7935,7 @@ class Ec2RunnerProviderProps(RunnerProviderProps):
         :param log_retention: (experimental) The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. Default: logs.RetentionDays.ONE_MONTH
         :param retry_options: 
         :param ami_builder: 
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build AMI containing GitHub Runner and all requirements. The image builder determines the OS and architecture of the runner. Default: Ec2RunnerProvider.imageBuilder()
         :param instance_type: (experimental) Instance type for launched runner instances. Default: m6i.large
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['ec2']
@@ -7926,6 +7962,7 @@ class Ec2RunnerProviderProps(RunnerProviderProps):
             check_type(argname="argument log_retention", value=log_retention, expected_type=type_hints["log_retention"])
             check_type(argname="argument retry_options", value=retry_options, expected_type=type_hints["retry_options"])
             check_type(argname="argument ami_builder", value=ami_builder, expected_type=type_hints["ami_builder"])
+            check_type(argname="argument group", value=group, expected_type=type_hints["group"])
             check_type(argname="argument image_builder", value=image_builder, expected_type=type_hints["image_builder"])
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument labels", value=labels, expected_type=type_hints["labels"])
@@ -7945,6 +7982,8 @@ class Ec2RunnerProviderProps(RunnerProviderProps):
             self._values["retry_options"] = retry_options
         if ami_builder is not None:
             self._values["ami_builder"] = ami_builder
+        if group is not None:
+            self._values["group"] = group
         if image_builder is not None:
             self._values["image_builder"] = image_builder
         if instance_type is not None:
@@ -8007,6 +8046,24 @@ class Ec2RunnerProviderProps(RunnerProviderProps):
         result = self._values.get("ami_builder")
         return typing.cast(typing.Optional[IRunnerImageBuilder], result)
 
+    @builtins.property
+    def group(self) -> typing.Optional[builtins.str]:
+        '''(experimental) GitHub Actions runner group name.
+
+        If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It
+        requires a paid GitHub account.
+
+        The group must exist or the runner will not start.
+
+        Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group.
+
+        :default: undefined
+
+        :stability: experimental
+        '''
+        result = self._values.get("group")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def image_builder(self) -> typing.Optional[IRunnerImageBuilder]:
         '''(experimental) Runner image builder used to build AMI containing GitHub Runner and all requirements.
@@ -8198,6 +8255,7 @@ class EcsRunnerProvider(
         cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
         cpu: typing.Optional[jsii.Number] = None,
         docker_in_docker: typing.Optional[builtins.bool] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -8223,6 +8281,7 @@ class EcsRunnerProvider(
         :param cluster: (experimental) Existing ECS cluster to use. Default: a new cluster
         :param cpu: (experimental) The number of cpu units used by the task. 1024 units is 1 vCPU. Fractions of a vCPU are supported. Default: 1024
         :param docker_in_docker: (experimental) Support building and running Docker images by enabling Docker-in-Docker (dind) and the required CodeBuild privileged mode. Disabling this can speed up provisioning of CodeBuild runners. If you don't intend on running or building Docker images, disable this for faster start-up times. Default: true
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder determines the OS and architecture of the runner. Default: EcsRunnerProvider.imageBuilder()
         :param instance_type: (experimental) Instance type of ECS cluster instances. Only used when creating a new cluster. Default: m6i.large or m6g.large
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['ecs']
@@ -8252,6 +8311,7 @@ class EcsRunnerProvider(
             cluster=cluster,
             cpu=cpu,
             docker_in_docker=docker_in_docker,
+            group=group,
             image_builder=image_builder,
             instance_type=instance_type,
             labels=labels,
@@ -8512,6 +8572,7 @@ class EcsRunnerProvider(
         "cluster": "cluster",
         "cpu": "cpu",
         "docker_in_docker": "dockerInDocker",
+        "group": "group",
         "image_builder": "imageBuilder",
         "instance_type": "instanceType",
         "labels": "labels",
@@ -8539,6 +8600,7 @@ class EcsRunnerProviderProps(RunnerProviderProps):
         cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
         cpu: typing.Optional[jsii.Number] = None,
         docker_in_docker: typing.Optional[builtins.bool] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -8563,6 +8625,7 @@ class EcsRunnerProviderProps(RunnerProviderProps):
         :param cluster: (experimental) Existing ECS cluster to use. Default: a new cluster
         :param cpu: (experimental) The number of cpu units used by the task. 1024 units is 1 vCPU. Fractions of a vCPU are supported. Default: 1024
         :param docker_in_docker: (experimental) Support building and running Docker images by enabling Docker-in-Docker (dind) and the required CodeBuild privileged mode. Disabling this can speed up provisioning of CodeBuild runners. If you don't intend on running or building Docker images, disable this for faster start-up times. Default: true
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder determines the OS and architecture of the runner. Default: EcsRunnerProvider.imageBuilder()
         :param instance_type: (experimental) Instance type of ECS cluster instances. Only used when creating a new cluster. Default: m6i.large or m6g.large
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['ecs']
@@ -8595,6 +8658,7 @@ class EcsRunnerProviderProps(RunnerProviderProps):
             check_type(argname="argument cluster", value=cluster, expected_type=type_hints["cluster"])
             check_type(argname="argument cpu", value=cpu, expected_type=type_hints["cpu"])
             check_type(argname="argument docker_in_docker", value=docker_in_docker, expected_type=type_hints["docker_in_docker"])
+            check_type(argname="argument group", value=group, expected_type=type_hints["group"])
             check_type(argname="argument image_builder", value=image_builder, expected_type=type_hints["image_builder"])
             check_type(argname="argument instance_type", value=instance_type, expected_type=type_hints["instance_type"])
             check_type(argname="argument labels", value=labels, expected_type=type_hints["labels"])
@@ -8624,6 +8688,8 @@ class EcsRunnerProviderProps(RunnerProviderProps):
             self._values["cpu"] = cpu
         if docker_in_docker is not None:
             self._values["docker_in_docker"] = docker_in_docker
+        if group is not None:
+            self._values["group"] = group
         if image_builder is not None:
             self._values["image_builder"] = image_builder
         if instance_type is not None:
@@ -8746,6 +8812,24 @@ class EcsRunnerProviderProps(RunnerProviderProps):
         result = self._values.get("docker_in_docker")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def group(self) -> typing.Optional[builtins.str]:
+        '''(experimental) GitHub Actions runner group name.
+
+        If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It
+        requires a paid GitHub account.
+
+        The group must exist or the runner will not start.
+
+        Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group.
+
+        :default: undefined
+
+        :stability: experimental
+        '''
+        result = self._values.get("group")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def image_builder(self) -> typing.Optional[IRunnerImageBuilder]:
         '''(experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements.
@@ -8952,6 +9036,7 @@ class FargateRunnerProvider(
         cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
         cpu: typing.Optional[jsii.Number] = None,
         ephemeral_storage_gib: typing.Optional[jsii.Number] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -8971,6 +9056,7 @@ class FargateRunnerProvider(
         :param cluster: (experimental) Existing Fargate cluster to use. Default: a new cluster
         :param cpu: (experimental) The number of cpu units used by the task. For tasks using the Fargate launch type, this field is required and you must use one of the following values, which determines your range of valid values for the memory parameter: 256 (.25 vCPU) - Available memory values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB) 512 (.5 vCPU) - Available memory values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB) 1024 (1 vCPU) - Available memory values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB) 2048 (2 vCPU) - Available memory values: Between 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB) 4096 (4 vCPU) - Available memory values: Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB) Default: 1024
         :param ephemeral_storage_gib: (experimental) The amount (in GiB) of ephemeral storage to be allocated to the task. The maximum supported value is 200 GiB. NOTE: This parameter is only supported for tasks hosted on AWS Fargate using platform version 1.4.0 or later. Default: 20
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder determines the OS and architecture of the runner. Default: FargateRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['fargate']
@@ -8994,6 +9080,7 @@ class FargateRunnerProvider(
             cluster=cluster,
             cpu=cpu,
             ephemeral_storage_gib=ephemeral_storage_gib,
+            group=group,
             image_builder=image_builder,
             label=label,
             labels=labels,
@@ -9359,6 +9446,7 @@ class FargateRunnerProvider(
         "cluster": "cluster",
         "cpu": "cpu",
         "ephemeral_storage_gib": "ephemeralStorageGiB",
+        "group": "group",
         "image_builder": "imageBuilder",
         "label": "label",
         "labels": "labels",
@@ -9380,6 +9468,7 @@ class FargateRunnerProviderProps(RunnerProviderProps):
         cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
         cpu: typing.Optional[jsii.Number] = None,
         ephemeral_storage_gib: typing.Optional[jsii.Number] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -9398,6 +9487,7 @@ class FargateRunnerProviderProps(RunnerProviderProps):
         :param cluster: (experimental) Existing Fargate cluster to use. Default: a new cluster
         :param cpu: (experimental) The number of cpu units used by the task. For tasks using the Fargate launch type, this field is required and you must use one of the following values, which determines your range of valid values for the memory parameter: 256 (.25 vCPU) - Available memory values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB) 512 (.5 vCPU) - Available memory values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB) 1024 (1 vCPU) - Available memory values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB) 2048 (2 vCPU) - Available memory values: Between 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB) 4096 (4 vCPU) - Available memory values: Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB) Default: 1024
         :param ephemeral_storage_gib: (experimental) The amount (in GiB) of ephemeral storage to be allocated to the task. The maximum supported value is 200 GiB. NOTE: This parameter is only supported for tasks hosted on AWS Fargate using platform version 1.4.0 or later. Default: 20
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder determines the OS and architecture of the runner. Default: FargateRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['fargate']
@@ -9422,6 +9512,7 @@ class FargateRunnerProviderProps(RunnerProviderProps):
             check_type(argname="argument cluster", value=cluster, expected_type=type_hints["cluster"])
             check_type(argname="argument cpu", value=cpu, expected_type=type_hints["cpu"])
             check_type(argname="argument ephemeral_storage_gib", value=ephemeral_storage_gib, expected_type=type_hints["ephemeral_storage_gib"])
+            check_type(argname="argument group", value=group, expected_type=type_hints["group"])
             check_type(argname="argument image_builder", value=image_builder, expected_type=type_hints["image_builder"])
             check_type(argname="argument label", value=label, expected_type=type_hints["label"])
             check_type(argname="argument labels", value=labels, expected_type=type_hints["labels"])
@@ -9444,6 +9535,8 @@ class FargateRunnerProviderProps(RunnerProviderProps):
             self._values["cpu"] = cpu
         if ephemeral_storage_gib is not None:
             self._values["ephemeral_storage_gib"] = ephemeral_storage_gib
+        if group is not None:
+            self._values["group"] = group
         if image_builder is not None:
             self._values["image_builder"] = image_builder
         if label is not None:
@@ -9554,6 +9647,24 @@ class FargateRunnerProviderProps(RunnerProviderProps):
         result = self._values.get("ephemeral_storage_gib")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def group(self) -> typing.Optional[builtins.str]:
+        '''(experimental) GitHub Actions runner group name.
+
+        If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It
+        requires a paid GitHub account.
+
+        The group must exist or the runner will not start.
+
+        Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group.
+
+        :default: undefined
+
+        :stability: experimental
+        '''
+        result = self._values.get("group")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def image_builder(self) -> typing.Optional[IRunnerImageBuilder]:
         '''(experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements.
@@ -9807,6 +9918,7 @@ class LambdaRunner(
         id: builtins.str,
         *,
         ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -9823,6 +9935,7 @@ class LambdaRunner(
         :param scope: -
         :param id: -
         :param ephemeral_storage_size: (experimental) The size of the function’s /tmp directory in MiB. Default: 10 GiB
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder must contain the {@link RunnerImageComponent.lambdaEntrypoint} component. The image builder determines the OS and architecture of the runner. Default: LambdaRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['lambda']
@@ -9843,6 +9956,7 @@ class LambdaRunner(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = LambdaRunnerProviderProps(
             ephemeral_storage_size=ephemeral_storage_size,
+            group=group,
             image_builder=image_builder,
             label=label,
             labels=labels,
@@ -9866,6 +9980,7 @@ class LambdaRunner(
         "log_retention": "logRetention",
         "retry_options": "retryOptions",
         "ephemeral_storage_size": "ephemeralStorageSize",
+        "group": "group",
         "image_builder": "imageBuilder",
         "label": "label",
         "labels": "labels",
@@ -9884,6 +9999,7 @@ class LambdaRunnerProviderProps(RunnerProviderProps):
         log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
         retry_options: typing.Optional[typing.Union[ProviderRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -9898,6 +10014,7 @@ class LambdaRunnerProviderProps(RunnerProviderProps):
         :param log_retention: (experimental) The number of days log events are kept in CloudWatch Logs. When updating this property, unsetting it doesn't remove the log retention policy. To remove the retention policy, set the value to ``INFINITE``. Default: logs.RetentionDays.ONE_MONTH
         :param retry_options: 
         :param ephemeral_storage_size: (experimental) The size of the function’s /tmp directory in MiB. Default: 10 GiB
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder must contain the {@link RunnerImageComponent.lambdaEntrypoint} component. The image builder determines the OS and architecture of the runner. Default: LambdaRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['lambda']
@@ -9919,6 +10036,7 @@ class LambdaRunnerProviderProps(RunnerProviderProps):
             check_type(argname="argument log_retention", value=log_retention, expected_type=type_hints["log_retention"])
             check_type(argname="argument retry_options", value=retry_options, expected_type=type_hints["retry_options"])
             check_type(argname="argument ephemeral_storage_size", value=ephemeral_storage_size, expected_type=type_hints["ephemeral_storage_size"])
+            check_type(argname="argument group", value=group, expected_type=type_hints["group"])
             check_type(argname="argument image_builder", value=image_builder, expected_type=type_hints["image_builder"])
             check_type(argname="argument label", value=label, expected_type=type_hints["label"])
             check_type(argname="argument labels", value=labels, expected_type=type_hints["labels"])
@@ -9935,6 +10053,8 @@ class LambdaRunnerProviderProps(RunnerProviderProps):
             self._values["retry_options"] = retry_options
         if ephemeral_storage_size is not None:
             self._values["ephemeral_storage_size"] = ephemeral_storage_size
+        if group is not None:
+            self._values["group"] = group
         if image_builder is not None:
             self._values["image_builder"] = image_builder
         if label is not None:
@@ -9992,6 +10112,24 @@ class LambdaRunnerProviderProps(RunnerProviderProps):
         result = self._values.get("ephemeral_storage_size")
         return typing.cast(typing.Optional[_aws_cdk_ceddda9d.Size], result)
 
+    @builtins.property
+    def group(self) -> typing.Optional[builtins.str]:
+        '''(experimental) GitHub Actions runner group name.
+
+        If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It
+        requires a paid GitHub account.
+
+        The group must exist or the runner will not start.
+
+        Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group.
+
+        :default: undefined
+
+        :stability: experimental
+        '''
+        result = self._values.get("group")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def image_builder(self) -> typing.Optional[IRunnerImageBuilder]:
         '''(experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements.
@@ -10453,6 +10591,7 @@ class CodeBuildRunner(
         *,
         compute_type: typing.Optional[_aws_cdk_aws_codebuild_ceddda9d.ComputeType] = None,
         docker_in_docker: typing.Optional[builtins.bool] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -10469,6 +10608,7 @@ class CodeBuildRunner(
         :param id: -
         :param compute_type: (experimental) The type of compute to use for this build. See the {@link ComputeType} enum for the possible values. Default: {@link ComputeType#SMALL }
         :param docker_in_docker: (experimental) Support building and running Docker images by enabling Docker-in-Docker (dind) and the required CodeBuild privileged mode. Disabling this can speed up provisioning of CodeBuild runners. If you don't intend on running or building Docker images, disable this for faster start-up times. Default: true
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder must contain the {@link RunnerImageComponent.docker} component unless ``dockerInDocker`` is set to false. The image builder determines the OS and architecture of the runner. Default: CodeBuildRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['codebuild']
@@ -10489,6 +10629,7 @@ class CodeBuildRunner(
         props = CodeBuildRunnerProviderProps(
             compute_type=compute_type,
             docker_in_docker=docker_in_docker,
+            group=group,
             image_builder=image_builder,
             label=label,
             labels=labels,
@@ -10521,6 +10662,7 @@ class Ec2Runner(
         id: builtins.str,
         *,
         ami_builder: typing.Optional[IRunnerImageBuilder] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -10540,6 +10682,7 @@ class Ec2Runner(
         :param scope: -
         :param id: -
         :param ami_builder: 
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build AMI containing GitHub Runner and all requirements. The image builder determines the OS and architecture of the runner. Default: Ec2RunnerProvider.imageBuilder()
         :param instance_type: (experimental) Instance type for launched runner instances. Default: m6i.large
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['ec2']
@@ -10563,6 +10706,7 @@ class Ec2Runner(
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = Ec2RunnerProviderProps(
             ami_builder=ami_builder,
+            group=group,
             image_builder=image_builder,
             instance_type=instance_type,
             labels=labels,
@@ -10602,6 +10746,7 @@ class FargateRunner(
         cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
         cpu: typing.Optional[jsii.Number] = None,
         ephemeral_storage_gib: typing.Optional[jsii.Number] = None,
+        group: typing.Optional[builtins.str] = None,
         image_builder: typing.Optional[IRunnerImageBuilder] = None,
         label: typing.Optional[builtins.str] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -10621,6 +10766,7 @@ class FargateRunner(
         :param cluster: (experimental) Existing Fargate cluster to use. Default: a new cluster
         :param cpu: (experimental) The number of cpu units used by the task. For tasks using the Fargate launch type, this field is required and you must use one of the following values, which determines your range of valid values for the memory parameter: 256 (.25 vCPU) - Available memory values: 512 (0.5 GB), 1024 (1 GB), 2048 (2 GB) 512 (.5 vCPU) - Available memory values: 1024 (1 GB), 2048 (2 GB), 3072 (3 GB), 4096 (4 GB) 1024 (1 vCPU) - Available memory values: 2048 (2 GB), 3072 (3 GB), 4096 (4 GB), 5120 (5 GB), 6144 (6 GB), 7168 (7 GB), 8192 (8 GB) 2048 (2 vCPU) - Available memory values: Between 4096 (4 GB) and 16384 (16 GB) in increments of 1024 (1 GB) 4096 (4 vCPU) - Available memory values: Between 8192 (8 GB) and 30720 (30 GB) in increments of 1024 (1 GB) Default: 1024
         :param ephemeral_storage_gib: (experimental) The amount (in GiB) of ephemeral storage to be allocated to the task. The maximum supported value is 200 GiB. NOTE: This parameter is only supported for tasks hosted on AWS Fargate using platform version 1.4.0 or later. Default: 20
+        :param group: (experimental) GitHub Actions runner group name. If specified, the runner will be registered with this group name. Setting a runner group can help managing access to self-hosted runners. It requires a paid GitHub account. The group must exist or the runner will not start. Users will still be able to trigger this runner with the correct labels. But the runner will only be able to run jobs from repos allowed to use the group. Default: undefined
         :param image_builder: (experimental) Runner image builder used to build Docker images containing GitHub Runner and all requirements. The image builder determines the OS and architecture of the runner. Default: FargateRunnerProvider.imageBuilder()
         :param label: (deprecated) GitHub Actions label used for this provider. Default: undefined
         :param labels: (experimental) GitHub Actions labels used for this provider. These labels are used to identify which provider should spawn a new on-demand runner. Every job sends a webhook with the labels it's looking for based on runs-on. We match the labels from the webhook with the labels specified here. If all the labels specified here are present in the job's labels, this provider will be chosen and spawn a new runner. Default: ['fargate']
@@ -10644,6 +10790,7 @@ class FargateRunner(
             cluster=cluster,
             cpu=cpu,
             ephemeral_storage_gib=ephemeral_storage_gib,
+            group=group,
             image_builder=image_builder,
             label=label,
             labels=labels,
@@ -10953,6 +11100,7 @@ def _typecheckingstub__637ac3a7237f114ea2a9842f95653a0d13444cd4da7a4dfe9330fdb98
     id: builtins.str,
     *,
     ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11486,6 +11634,7 @@ def _typecheckingstub__bb924a0cf987a9f87f4ad0ebd952c61ebd4e02d7d83501b9600f14157
     *,
     compute_type: typing.Optional[_aws_cdk_aws_codebuild_ceddda9d.ComputeType] = None,
     docker_in_docker: typing.Optional[builtins.bool] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11551,6 +11700,7 @@ def _typecheckingstub__9377dcf4cd4dae74730635bdaf02246acb473843cea2856cf9a64295d
     retry_options: typing.Optional[typing.Union[ProviderRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     compute_type: typing.Optional[_aws_cdk_aws_codebuild_ceddda9d.ComputeType] = None,
     docker_in_docker: typing.Optional[builtins.bool] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11644,6 +11794,7 @@ def _typecheckingstub__fd3f279069067627058d9a5818aab030be5ffd71ce03962b4fd7cdd85
     id: builtins.str,
     *,
     ami_builder: typing.Optional[IRunnerImageBuilder] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11712,6 +11863,7 @@ def _typecheckingstub__b650c4bf7f2a31b514d6f1f9e0c1b4b2cdae8b20b6f209f5b5fc74ef4
     log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
     retry_options: typing.Optional[typing.Union[ProviderRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     ami_builder: typing.Optional[IRunnerImageBuilder] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11737,6 +11889,7 @@ def _typecheckingstub__c520325dd0289bf8c6670ecdce77df4b229a0a2681957e61665818d2f
     cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
     cpu: typing.Optional[jsii.Number] = None,
     docker_in_docker: typing.Optional[builtins.bool] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11811,6 +11964,7 @@ def _typecheckingstub__73c1978e12dcea1bd69ce0927a80bd887d7f7d1b6573831942495e9d5
     cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
     cpu: typing.Optional[jsii.Number] = None,
     docker_in_docker: typing.Optional[builtins.bool] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11837,6 +11991,7 @@ def _typecheckingstub__f7098876c10584a4cc58e16d23fd86ffe1fc50f2b55ca60549136d051
     cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
     cpu: typing.Optional[jsii.Number] = None,
     ephemeral_storage_gib: typing.Optional[jsii.Number] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11905,6 +12060,7 @@ def _typecheckingstub__26cdeb87df1adf5c49e0f9c1c061c7138af674da9af221212e1505fc1
     cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
     cpu: typing.Optional[jsii.Number] = None,
     ephemeral_storage_gib: typing.Optional[jsii.Number] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11935,6 +12091,7 @@ def _typecheckingstub__80e9b84ecba02bdef856d3ee3f48a5e0a5e58ad813554fd529c0abe3a
     id: builtins.str,
     *,
     ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -11955,6 +12112,7 @@ def _typecheckingstub__45a4a92b817689da2d55675d278ad5c96699269cc41f3406b7fca6d7a
     log_retention: typing.Optional[_aws_cdk_aws_logs_ceddda9d.RetentionDays] = None,
     retry_options: typing.Optional[typing.Union[ProviderRetryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     ephemeral_storage_size: typing.Optional[_aws_cdk_ceddda9d.Size] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -12042,6 +12200,7 @@ def _typecheckingstub__1ab9454b0ecfcd12fc0ab07c0f0f4d7ce646a5a928f5e14092b0a6c42
     *,
     compute_type: typing.Optional[_aws_cdk_aws_codebuild_ceddda9d.ComputeType] = None,
     docker_in_docker: typing.Optional[builtins.bool] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -12061,6 +12220,7 @@ def _typecheckingstub__a0a6acc584ae2ad3aed3605810cea44858f1a0bc22f62f2df9005b318
     id: builtins.str,
     *,
     ami_builder: typing.Optional[IRunnerImageBuilder] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     instance_type: typing.Optional[_aws_cdk_aws_ec2_ceddda9d.InstanceType] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
@@ -12087,6 +12247,7 @@ def _typecheckingstub__e507aa08f983fcd409ec9cf4ba5e0e6312ce72778cbbb2f9b5b016fde
     cluster: typing.Optional[_aws_cdk_aws_ecs_ceddda9d.Cluster] = None,
     cpu: typing.Optional[jsii.Number] = None,
     ephemeral_storage_gib: typing.Optional[jsii.Number] = None,
+    group: typing.Optional[builtins.str] = None,
     image_builder: typing.Optional[IRunnerImageBuilder] = None,
     label: typing.Optional[builtins.str] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,

{cloudsnorkel_cdk_github_runners-0.14.4 → cloudsnorkel_cdk_github_runners-0.14.6}/src/cloudsnorkel/cdk_github_runners/_jsii/__init__.py

@@ -33,9 +33,9 @@ import constructs._jsii
 
 __jsii_assembly__ = jsii.JSIIAssembly.load(
     "@cloudsnorkel/cdk-github-runners",
-    "0.14.4",
+    "0.14.6",
     __name__[0:-6],
-    "cdk-github-runners@0.14.4.jsii.tgz",
+    "cdk-github-runners@0.14.6.jsii.tgz",
 )
 
 __all__ = [

{cloudsnorkel_cdk_github_runners-0.14.4 → cloudsnorkel_cdk_github_runners-0.14.6/src/cloudsnorkel.cdk_github_runners.egg-info}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.1
 Name: cloudsnorkel.cdk-github-runners
-Version: 0.14.4
-Summary: CDK construct to create GitHub Actions self-hosted runners. A webhook listens to events and creates ephemeral runners on the fly.
+Version: 0.14.6
+Summary: CDK construct to create GitHub Actions self-hosted runners. Creates ephemeral runners on demand. Easy to deploy and highly customizable.
 Home-page: https://github.com/CloudSnorkel/cdk-github-runners.git
 Author: Amir Szekely<amir@cloudsnorkel.com>
 License: Apache-2.0
@@ -22,9 +22,9 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: aws-cdk-lib<3.0.0,>=2.155.0
 Requires-Dist: constructs<11.0.0,>=10.0.5
-Requires-Dist: jsii<2.0.0,>=1.103.1
+Requires-Dist: jsii<2.0.0,>=1.104.0
 Requires-Dist: publication>=0.0.3
-Requires-Dist: typeguard<5.0.0,>=2.13.3
+Requires-Dist: typeguard<4.3.0,>=2.13.3
 
 # GitHub Self-Hosted Runners CDK Constructs
 
@@ -243,7 +243,7 @@ You can also create your own provider by implementing `IRunnerProvider`.
 5. Execute the status command (you may need to specify `--profile` too) and open the resulting `status.json` file
 6. Open the URL in `github.setup.url` from `status.json` or [manually setup GitHub](SETUP_GITHUB.md) integration as an app or with personal access token
 7. Run status command again to confirm `github.auth.status` and `github.webhook.status` are OK
-8. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, linux, codebuild]` or similar
+8. Trigger a GitHub action that has a `self-hosted` label with `runs-on: [self-hosted, codebuild]` (or non-default labels you set in step 2)
 9. If the action is not successful, see [troubleshooting](#Troubleshooting)
 
 [![Demo](demo-thumbnail.jpg)](https://youtu.be/wlyv_3V8lIw)

{cloudsnorkel_cdk_github_runners-0.14.4 → cloudsnorkel_cdk_github_runners-0.14.6}/src/cloudsnorkel.cdk_github_runners.egg-info/SOURCES.txt

@@ -11,4 +11,4 @@ src/cloudsnorkel.cdk_github_runners.egg-info/top_level.txt
 src/cloudsnorkel/cdk_github_runners/__init__.py
 src/cloudsnorkel/cdk_github_runners/py.typed
 src/cloudsnorkel/cdk_github_runners/_jsii/__init__.py
-src/cloudsnorkel/cdk_github_runners/_jsii/cdk-github-runners@0.14.4.jsii.tgz
+src/cloudsnorkel/cdk_github_runners/_jsii/cdk-github-runners@0.14.6.jsii.tgz

{cloudsnorkel_cdk_github_runners-0.14.4 → cloudsnorkel_cdk_github_runners-0.14.6}/src/cloudsnorkel.cdk_github_runners.egg-info/requires.txt

@@ -1,5 +1,5 @@
 aws-cdk-lib<3.0.0,>=2.155.0
 constructs<11.0.0,>=10.0.5
-jsii<2.0.0,>=1.103.1
+jsii<2.0.0,>=1.104.0
 publication>=0.0.3
-typeguard<5.0.0,>=2.13.3
+typeguard<4.3.0,>=2.13.3