update labels

Signed-off-by: tylertitsworth <tyler.titsworth@intel.com>

Author: tylertitsworth

.github/linters/actionlint.yml

@@ -12,8 +12,8 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
----
 self-hosted-runner:
   labels:
-    - k8-runners
-    - kubectl
+  - intel-ubuntu-latest
+  - k8-runners
+  - kubectl

.github/workflows/container-ci.yaml

@@ -57,13 +57,13 @@ on:
         required: false
         type: boolean
 jobs:
-####################################################################################################
-# Compose Build
-####################################################################################################
+  ####################################################################################################
+  # Compose Build
+  ####################################################################################################
   setup-build:
     outputs:
       matrix: ${{ steps.build-matrix.outputs.matrix }}
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
@@ -79,7 +79,7 @@ jobs:
   build-containers:
     needs: [setup-build]
     env: ${{ matrix }}
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     strategy:
       matrix: ${{ fromJson(needs.setup-build.outputs.matrix) }}
       fail-fast: false
@@ -105,13 +105,13 @@ jobs:
         repo: ${{ secrets.REPO }}
         no-push: ${{ inputs.no_push }}
         no-start: ${{ inputs.no_start }}
-####################################################################################################
-# Trivy Scan
-####################################################################################################
+        ####################################################################################################
+        # Trivy Scan
+        ####################################################################################################
   setup-scan:
     needs: [build-containers]
     if: ${{ github.event_name == 'pull_request' }}
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     outputs:
       matrix: ${{ steps.scan-matrix.outputs.matrix }}
     steps:
@@ -128,7 +128,7 @@ jobs:
   scan-containers:
     needs: [setup-scan]
     if: ${{ !inputs.no_build && github.event_name == 'pull_request' }}
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     strategy:
       matrix:
         container: ${{ fromJSON(needs.setup-scan.outputs.matrix) }}
@@ -159,12 +159,12 @@ jobs:
         sarif_file: '${{ matrix.container }}-scan.sarif'
         category: '${{ matrix.container }}'
       continue-on-error: true
-####################################################################################################
-# Generic Test Runner
-####################################################################################################
+      ####################################################################################################
+      # Generic Test Runner
+      ####################################################################################################
   setup-test:
     needs: [build-containers]
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     outputs:
       matrix: ${{ steps.test-matrix.outputs.matrix }}
     steps:

.github/workflows/dependency-review.yaml

@@ -29,7 +29,7 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
 jobs:
   dependency-review:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     permissions:
       pull-requests: write
     steps:

.github/workflows/dockerhub-description.yml

@@ -19,7 +19,7 @@ on:
 permissions: read-all
 jobs:
   setup-matrix:
-    runs-on: ubuntu-latest
+    runs-on: intel-ubuntu-latest
     outputs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
@@ -32,7 +32,7 @@ jobs:
       id: set-matrix
       run: echo "matrix=$(jq -c . < .github/dockerhub-readmes.json)" >> $GITHUB_OUTPUT
   publish-dockerhub-description:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     needs: setup-matrix
     strategy:
       matrix: ${{ fromJson(needs.setup-matrix.outputs.matrix) }}

.github/workflows/docs.yaml

@@ -25,7 +25,7 @@ concurrency:
   cancel-in-progress: true
 jobs:
   mkdocs:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     permissions:
       contents: read
       id-token: write

.github/workflows/integration-test.yaml

@@ -21,7 +21,7 @@ concurrency:
   cancel-in-progress: true
 jobs:
   group-diff:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     outputs:
       groups: ${{ steps.group-list.outputs.FOLDERS }}
     steps:
@@ -71,7 +71,7 @@ jobs:
     secrets: inherit
   status-check:
     needs: [group-diff, pipeline-ci]
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     if: always()
     steps:
     - name: Harden Runner

.github/workflows/lint.yaml

@@ -15,15 +15,20 @@
 name: Lint
 permissions: read-all
 on:
-  merge_group: null
   pull_request: null
+  push:
+    branches: ["main"]
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 jobs:
   lint:
     name: Lint
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
+    permissions:
+      contents: read
+      actions: read
+      statuses: write
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1

.github/workflows/test-runner-ci.yaml

@@ -26,7 +26,7 @@ concurrency:
   cancel-in-progress: true
 jobs:
   unit-test:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     strategy:
       matrix:
         python: ["3.8", "3.9", "3.10", "3.11", "3.12"]
@@ -63,7 +63,7 @@ jobs:
         REPO: ${{ secrets.REPO }}
   coverage:
     needs: [unit-test]
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
@@ -73,7 +73,7 @@ jobs:
       with:
         parallel-finished: true
   integration-test:
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1

.github/workflows/weekly-test.yaml

@@ -20,7 +20,7 @@ on:
 permissions: read-all
 jobs:
   get-groups:
-    runs-on: ubuntu-latest
+    runs-on: intel-ubuntu-latest
     outputs:
       groups: ${{ steps.group-list.outputs.FOLDERS }}
     steps:
@@ -69,7 +69,7 @@ jobs:
         kubeconfig_path: ${{ secrets.KUBECONFIG_PATH }}
   scan:
     name: gitleaks
-    runs-on: ubuntu-latest
+    runs-on: ${{ github.repository_owner == 'intel' && 'intel-ubuntu-latest' || 'ubuntu-latest' }}
     steps:
     - name: Harden Runner
       uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1

test-runner/utils/test.py

@@ -57,7 +57,7 @@ class Test(BaseModel):
     notebook: Optional[bool] = False
     serving: Optional[bool] = False
     cap_add: Optional[str] = "AUDIT_READ"
-    device: Optional[str] = "/dev/dri"
+    device: Optional[str] = []
     entrypoint: Optional[str] = ""
     groups_add: Optional[List[str]] = ["109", "44"]
     hostname: Optional[str] = None
@@ -109,7 +109,7 @@ def serving_run(self, img: str, env: dict, volumes: Volume):
             networks=["host"],
             # Misc
             cap_add=[self.cap_add],
-            devices=[expandvars(self.device, nounset=True)],
+            devices=self.device,
             entrypoint=(
                 expandvars(self.entrypoint, nounset=True) if self.entrypoint else None
             ),
@@ -134,7 +134,7 @@ def serving_run(self, img: str, env: dict, volumes: Volume):
                 networks=["host"],
                 # Misc
                 cap_add=[self.cap_add],
-                devices=[expandvars(self.device, nounset=True)],
+                devices=self.device,
                 hostname=self.hostname,
                 ipc=self.ipc,
                 privileged=self.privileged,
@@ -231,7 +231,7 @@ def container_run(self):
                 volumes=volumes,
                 # Misc
                 cap_add=[self.cap_add],
-                devices=[expandvars(self.device, nounset=True)],
+                devices=self.device,
                 entrypoint=(
                     expandvars(self.entrypoint, nounset=True)
                     if self.entrypoint