Hot to deploy a runner with labels starting with a dot/non RFC 1123 compliant

[tbirk-bhs]

Hello,

I'm trying to migrate from the legacy ARC to the new gha-runner-scale-set.
With the legacy ARC we had labels defined which start with a dot, e.g. „.net-sdk7”.

When I try to deploy the gha-runner-scale-set with the installation name “.net-sdk7” I get the error message “Error: release name is invalid: .net-sdk-7-test ”

INSTALLATION_NAME=".net-sdk-7"                                                                                                                             
helm upgrade --install "${INSTALLATION_NAME}" \
    --namespace "arc-runners" \
    --version 0.7.0 \
    --values values-runner-scale-set-windows-sdk7.yml \
    --set githubConfigUrl="${GITHUB_CONFIG_URL}" \
    --set githubConfigSecret.github_token="${GHES_TOKEN}" \
    oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set

Error: release name is invalid: .net-sdk-7

I tried to remove the dot from the release name and set the label as “runnerScaleSetName”.
But now the helm install fails because of invalid name for ServiceAccount, Secret, Role etc.

INSTALLATION_NAME="net-sdk-7"                                                                                                                            
helm upgrade --install "${INSTALLATION_NAME}" \
    --namespace "arc-runners" \
    --version 0.7.0 \
    --values values-runner-scale-set-windows-sdk7.yml \
    --set githubConfigUrl="${GITHUB_CONFIG_URL}" \
    --set githubConfigSecret.github_token="${GHES_TOKEN}" \
    --set runnerScaleSetName=".net-sdk7" \
    oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set

Release "net-sdk-7-test" does not exist. Installing it now.
Pulled: ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set:0.7.0
Digest: sha256:1b07fd6c91909fa3d41b300d8333fcddc657d14b2dade573b358de4bc16670e2
W0117 07:50:35.971261   87923 warnings.go:70] unknown field "spec.template.spec.resources"
Error: 5 errors occurred:
        * ServiceAccount ".net-sdk7-gha-rs-no-permission" is invalid: [metadata.name: Invalid value: ".net-sdk7-gha-rs-no-permission": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*'), metadata.labels: Invalid value: ".net-sdk7": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue',  or 'my_value',  or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')]
        * Secret ".net-sdk7-gha-rs-github-secret" is invalid: [metadata.name: Invalid value: ".net-sdk7-gha-rs-github-secret": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*'), metadata.labels: Invalid value: ".net-sdk7": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue',  or 'my_value',  or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')]
        * Role.rbac.authorization.k8s.io ".net-sdk7-gha-rs-manager" is invalid: metadata.labels: Invalid value: ".net-sdk7": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue',  or 'my_value',  or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')
        * RoleBinding.rbac.authorization.k8s.io ".net-sdk7-gha-rs-manager" is invalid: metadata.labels: Invalid value: ".net-sdk7": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue',  or 'my_value',  or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')
        * AutoscalingRunnerSet.actions.github.com ".net-sdk7" is invalid: [metadata.name: Invalid value: ".net-sdk7": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*'), metadata.labels: Invalid value: ".net-sdk7": a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character (e.g. 'MyValue',  or 'my_value',  or '12345', regex used for validation is '(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])?')]

Is there a way to override all these names to get the runner-label (which is not RFC 1123 compliant) deployed?

Thanks,

Timon