From ee75bf15deacf3a343a86b6cd97dbd4df8c7edbb Mon Sep 17 00:00:00 2001 From: notgitika Date: Wed, 8 Jul 2026 15:41:46 -0400 Subject: [PATCH] ci(e2e): run E2E job on CodeBuild-hosted runner (POC) Move the e2e job off ubuntu-latest onto our AWS CodeBuild-hosted GitHub Actions runner (project agentcore-e2e in the CI account, us-east-1). GitHub-hosted runner IPs rotate through shared pools whose reputation trips the service WAF, causing 403s before the request reaches service code; dedicated CodeBuild compute inside AWS avoids that and removes cross-org runner-pickup latency. E2E API calls also no longer cross the public internet. The authorize job stays on ubuntu-latest (cheap, no AWS calls). No change needed to the E2E IAM role: configure-aws-credentials still uses GitHub OIDC, which works unchanged from a CodeBuild runner. POC scope: this workflow only. Roll out to e2e-tests-full.yml and canary.yml after a bake period. --- .github/workflows/e2e-tests.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml index 81021ee91..fa90f979f 100644 --- a/.github/workflows/e2e-tests.yml +++ b/.github/workflows/e2e-tests.yml @@ -50,7 +50,13 @@ jobs: e2e: needs: authorize if: needs.authorize.outputs.is_authorized == 'true' - runs-on: ubuntu-latest + # Run on our AWS CodeBuild-hosted runner instead of a GitHub-hosted runner. + # GitHub-hosted runner IPs rotate through shared pools whose reputation trips + # the service WAF (403s before the request reaches service code); dedicated + # CodeBuild compute inside AWS avoids that and cuts runner-pickup latency. + # Label format: codebuild--${{ github.run_id }}-${{ github.run_attempt }} + # backed by the `agentcore-e2e` project in the CI account (us-east-1). + runs-on: codebuild-agentcore-e2e-${{ github.run_id }}-${{ github.run_attempt }} environment: e2e-testing timeout-minutes: 30 env: