@@ -49,8 +49,6 @@ Organization owners using the {% data variables.product.prodname_team %} plan ca
|
||||
|
||||
Enterprise owners can configure Azure private networking for {% data variables.product.company_short %}-hosted runners at the enterprise level. For more information, see "[AUTOTITLE](/enterprise-cloud@latest/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-azure-private-networking-for-github-hosted-runners-in-your-enterprise)."
|
||||
|
||||
Organization owners for organizations in an enterprise can configure Azure private networking for {% data variables.product.company_short %}-hosted runners at the organization level. For more information, see "[AUTOTITLE](/organizations/managing-organization-settings/about-azure-private-networking-for-github-hosted-runners-in-your-organization)."
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% endif %}
|
||||
|
||||
@@ -57,7 +57,7 @@ You should consider adding manual approval protection for sensitive environments
|
||||
|
||||
There is significant risk in sourcing actions from third-party repositories on {% data variables.product.prodname_dotcom %}. If you do allow any third-party actions, you should create internal guidelines that encourage your team to follow best practices, such as pinning actions to the full commit SHA. For more information, see "[AUTOTITLE](/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)."
|
||||
|
||||
{% ifversion actions-private-networking-azure-vnet %}
|
||||
{% ifversion ghec %}
|
||||
|
||||
### Private networking with GitHub-hosted runners
|
||||
|
||||
@@ -112,15 +112,14 @@ Finally, you should consider security hardening for self-hosted runners. For mor
|
||||
|
||||
{% data reusables.actions.about-artifacts %} For more information, see "[AUTOTITLE](/actions/using-workflows/storing-workflow-data-as-artifacts)."
|
||||
|
||||
{% ifversion actions-caching %}{% data variables.product.prodname_actions %} also has a caching system that you can use to cache dependencies to speed up workflow runs. For more information, see "[AUTOTITLE](/actions/using-workflows/caching-dependencies-to-speed-up-workflows)."{% endif %}
|
||||
|
||||
{% data variables.product.prodname_actions %} also has a caching system that you can use to cache dependencies to speed up workflow runs. For more information, see "[AUTOTITLE](/actions/using-workflows/caching-dependencies-to-speed-up-workflows)."
|
||||
{% ifversion ghes %}
|
||||
You must configure external blob storage for workflow artifacts{% ifversion actions-caching %}, caches,{% endif %} and other workflow logs. Decide which supported storage provider your enterprise will use. For more information, see "[AUTOTITLE](/admin/github-actions/getting-started-with-github-actions-for-your-enterprise/getting-started-with-github-actions-for-github-enterprise-server#external-storage-requirements)."
|
||||
You must configure external blob storage for workflow artifacts, caches, and other workflow logs. Decide which supported storage provider your enterprise will use. For more information, see "[AUTOTITLE](/admin/github-actions/getting-started-with-github-actions-for-your-enterprise/getting-started-with-github-actions-for-github-enterprise-server#external-storage-requirements)."
|
||||
{% endif %}
|
||||
|
||||
{% ifversion ghec or ghes %}
|
||||
|
||||
You can use policy settings for {% data variables.product.prodname_actions %} to customize the storage of workflow artifacts{% ifversion actions-caching %}, caches,{% endif %} and log retention. For more information, see "[AUTOTITLE](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise)."
|
||||
You can use policy settings for {% data variables.product.prodname_actions %} to customize the storage of workflow artifacts, caches, and log retention. For more information, see "[AUTOTITLE](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise)."
|
||||
|
||||
{% endif %}
|
||||
|
||||
|
||||
@@ -3,7 +3,7 @@ title: About Azure private networking for GitHub-hosted runners in your organiza
|
||||
shortTitle: About Azure private networking
|
||||
intro: 'You can create create a private network configuration for your organization to use {% data variables.product.company_short %}-hosted runners in your Azure Virtual Network(s) (VNET).'
|
||||
versions:
|
||||
feature: actions-private-networking-azure-vnet
|
||||
fpt: '*'
|
||||
type: overview
|
||||
permissions: '{% data reusables.actions.azure-vnet-organization-permissions %}'
|
||||
topics:
|
||||
|
||||
@@ -2,9 +2,9 @@
|
||||
title: About networking for hosted compute products in your organization
|
||||
shortTitle: About private networking
|
||||
intro: 'You can manage private networking for {% data variables.product.company_short %}-hosted products using network configurations in your organization.'
|
||||
permissions: 'Organization owners for organizations in an enterprise or organizations using the {% data variables.product.prodname_team %} plan can configure private networking for hosted compute products at the organization level.'
|
||||
permissions: '{% data reusables.actions.azure-vnet-organization-permissions %}'
|
||||
versions:
|
||||
feature: actions-private-networking-azure-vnet
|
||||
fpt: '*'
|
||||
type: how_to
|
||||
topics:
|
||||
- Actions
|
||||
|
||||
@@ -3,7 +3,7 @@ title: Configuring private networking for GitHub-hosted runners in your organiza
|
||||
shortTitle: Configuring private networking
|
||||
intro: 'Learn how to use {% data variables.product.company_short %}-hosted runners with an Azure private network in your organization.'
|
||||
versions:
|
||||
feature: actions-private-networking-azure-vnet
|
||||
fpt: '*'
|
||||
type: how_to
|
||||
permissions: '{% data reusables.actions.azure-vnet-organization-permissions %}'
|
||||
topics:
|
||||
@@ -25,7 +25,7 @@ topics:
|
||||
|
||||
{% data reusables.actions.azure-vnet-configure-azure-resources-procedures %}
|
||||
|
||||
## Creating a network configuration for your enterprise in {% data variables.product.company_short %}
|
||||
## Creating a network configuration for your organization in {% data variables.product.company_short %}
|
||||
|
||||
{% data reusables.actions.azure-vnet-creating-network-configuration-procedures %}
|
||||
|
||||
|
||||
@@ -3,7 +3,7 @@ title: Troubleshooting Azure private network configurations for GitHub-hosted ru
|
||||
shortTitle: Troubleshooting Azure private networking
|
||||
intro: 'Learn how to fix common issues while creating Azure private network configurations to use {% data variables.product.company_short %}-hosted runners with an Azure VNET.'
|
||||
versions:
|
||||
feature: actions-private-networking-azure-vnet
|
||||
fpt: '*'
|
||||
type: how_to
|
||||
permissions: '{% data reusables.actions.azure-vnet-organization-permissions %}'
|
||||
topics:
|
||||
|
||||
@@ -325,7 +325,7 @@ To use the script, fill in the placeholder environment variable values with the
|
||||
# - Resource group
|
||||
# - Network Security Group rules
|
||||
# - Virtual network (vnet) and subnet
|
||||
# - Network Settings with specified subnet and GitHub Enterprise database ID
|
||||
# - Network Settings with specified subnet and GitHub {% ifversion ghec %}Enterprise{% else %}Organization {% endif %}database ID
|
||||
#
|
||||
# It also registers the `GitHub.Network` resource provider with the subscription,
|
||||
# delegates the created subnet to the Actions service via the `GitHub.Network/NetworkSettings`
|
||||
|
||||
@@ -31,7 +31,11 @@ Ensure your Azure resources have been configured _before_ adding a network confi
|
||||
{% endnote %}
|
||||
|
||||
1. Create a new runner group for your{% ifversion ghec %} enterprise. For more information about how to create a runner group, see "[AUTOTITLE](/actions/using-github-hosted-runners/controlling-access-to-larger-runners#creating-a-runner-group-for-an-enterprise)."{% else %} organization. For more information about how to create a runner group, see "[AUTOTITLE](/actions/using-github-hosted-runners/about-larger-runners/controlling-access-to-larger-runners#creating-a-runner-group-for-an-organization)."{% endif %}
|
||||
{%- ifversion ghec %}
|
||||
{% data reusables.actions.workflows.runner-groups-enterprise-organization-access %}
|
||||
{% else %}
|
||||
1. To choose a policy for repository access, select the **Repository access** dropdown menu and click a policy. You can configure a runner group to be accessible to a specific list of repositories, or all repositories in the organization.
|
||||
{% endif %}
|
||||
1. While configuring your runner group, under "Network configurations," use the dropdown menu to select the network configuration you created for the Azure VNET.
|
||||
1. To create the group and apply the policy, click **Create group**.
|
||||
|
||||
|
||||
@@ -1,5 +1,13 @@
|
||||
To use {% data variables.product.company_short %}-hosted runners with an Azure VNET, you will need to configure your Azure resources and then create a networking configuration in {% data variables.product.company_short %}. {% ifversion ghec %}
|
||||
To use {% data variables.product.company_short %}-hosted runners with an Azure VNET, you will need to configure your Azure resources and then create a networking configuration in {% data variables.product.company_short %}.
|
||||
|
||||
For procedures to configure Azure private networking at the enterprise level, see "[AUTOTITLE](/admin/configuration/configuring-private-networking-for-hosted-compute-products/configuring-private-networking-for-github-hosted-runners-in-your-enterprise)."{% endif %}
|
||||
{% ifversion fpt %}
|
||||
|
||||
For procedures to configure Azure private networking at the organization level, see "[AUTOTITLE](/organizations/managing-organization-settings/configuring-private-networking-for-github-hosted-runners-in-your-organization)."
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% ifversion ghec %}
|
||||
|
||||
For procedures to configure Azure private networking at the enterprise level, see "[AUTOTITLE](/admin/configuration/configuring-private-networking-for-hosted-compute-products/configuring-private-networking-for-github-hosted-runners-in-your-enterprise)."
|
||||
|
||||
{% endif %}
|
||||
|
||||
@@ -1 +1 @@
|
||||
Organization owners for organizations in an enterprise or organizations using the {% data variables.product.prodname_team %} plan can configure Azure private networking for {% data variables.product.company_short %}-hosted runners at the organization level.
|
||||
Organizations using the {% data variables.product.prodname_team %} plan can configure Azure private networking for {% data variables.product.company_short %}-hosted runners at the organization level.
|
||||
|
||||
@@ -3,5 +3,5 @@
|
||||
"apiOnlyEvents": "This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
|
||||
"apiRequestEvent": "This event is only available via audit log streaming."
|
||||
},
|
||||
"sha": "9f3f9f2cb0b4ad3fd96d3519867b784d99cbe78f"
|
||||
"sha": "31dc4c80aa9fa86aca62a076a8bb4e5c82996942"
|
||||
}
|
||||
Reference in New Issue
Block a user