(iggy) 01/02: ci: route linux pre-merge tests to self-hosted GCP runners for maintainer runs

[pa...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

thepatrykk pushed a commit to branch ci/self-hosted-gcp-runners
in repository https://gitbox.apache.org/repos/asf/iggy.git

commit 6332acb845c08a78e4a11e1945efd4e61e78f3de
Author: Patryk Huzarski <pa...@laserdata.com>
AuthorDate: Thu Aug 20 13:30:27 2026 +0200

    ci: route linux pre-merge tests to self-hosted GCP runners for maintainer runs
---
 .github/workflows/_test.yml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index eb0483efb..77e83bbe6 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -38,11 +38,23 @@ permissions:
 
 jobs:
   run:
-    # Select runner based on build target
+    # Select runner based on build target. Linux x86_64 tasks additionally
+    # route to the project's self-hosted ephemeral runners (GCP Cloud Run,
+    # label iggy-gcp) — but only for runs triggered by maintainers: pushes,
+    # manual dispatches, and PRs authored by org OWNER/MEMBER. Third-party
+    # fork PRs always stay on GitHub-hosted ubuntu-latest so external code
+    # never executes on project infrastructure (per ASF self-hosted runner
+    # guidance). NOTE: do not merge until the iggy-gcp runner group is live,
+    # or maintainer PR jobs will queue forever.
     runs-on: ${{
       (inputs.task == 'build-aarch64-gnu' || inputs.task == 'build-aarch64-musl') && 'ubuntu-24.04-arm' ||
       inputs.task == 'build-macos-aarch64' && 'macos-14' ||
       inputs.task == 'build-windows-sdk' && 'windows-latest' ||
+      (github.event_name == 'push' ||
+       github.event_name == 'workflow_dispatch' ||
+       github.event.pull_request.author_association == 'OWNER' ||
+       github.event.pull_request.author_association == 'MEMBER')
+      && fromJSON('["self-hosted", "iggy-gcp"]') ||
       'ubuntu-latest'
       }}
     timeout-minutes: 60