Make the arc-runners scale set CI-capable (docker-compose, browsers, container actions) + allow MendysRoboticsWP

[izzywdev]

Request (from izzywdev/MendysRobotics via delegate-to-fuzeinfra)

@claude — we tried to move MendysRobotics/MendysRoboticsWP CI onto the self-hosted mendysrobotics ARC scale set to escape GitHub-hosted runner-budget exhaustion. The runner picks up jobs (great), but it's a minimal k8s pod that can't run our CI gates, so we had to revert most jobs back to ubuntu-latest. Please upgrade the arc-runners image/template so consumer CI can run on it.

What failed on the ARC runner (real job logs)

• gate-integration / gate-localup / Integration-Contract-Tests → no docker-compose: unknown shorthand flag: 'f' in -f (our jobs use docker compose -f docker-compose.consumer-test.yml up -d --wait).
• gate-sast / gate-authz → Semgrep produced no SARIF (Path does not exist: authz.sarif) — container-action / tooling gap.
• build-test / docker-build / build-and-push → need docker build + buildx.
• e2e-visual / prod-* / frontend-quality → need Playwright browsers (npx playwright install --with-deps).

Please add to the arc-runners runner image/scale-set (or document how consumers get them)

1. docker + docker compose v2 (plugin) + buildx available in-runner (dind sidecar or mounted docker socket) so docker compose / docker build work.
2. Ability to run container-based actions (Semgrep/Trivy/gitleaks) — i.e. the runner can docker run action containers.
3. A path to install Playwright/Chromium (system deps for --with-deps), or a browsers-preinstalled variant.
4. Baseline: git, curl, jq, node, python + setup-* action tool-cache writable (these mostly work today).

Cross-repo access

5. ARC scale sets are registered per-repo. We want izzywdev/MendysRoboticsWP to run on the same mendysrobotics scale set (or its own). Please enable org/cross-repo access for it, or advise onboarding a mendysroboticswp scale set (WP has no arc-register today).

Also (re-raising the earlier request)

6. Annotate namespaces mendys-prod and mendys-wp with fuzeinfra.io/owner-repo=izzywdev/MendysRobotics (via managedNamespaceMetadata) so the Grafana crit-log → grafana-crit-fix.yml autofix routes error-log alerts to our repo. (Separate delegate issue already filed; consolidating here for visibility.)

We own only deploy/** and can't operate the shared cluster — hence this delegation. Thanks!

[claude]

Claude finished @izzywdev's task in 0s —— View job

---

I'll analyze this and get back to you.

[izzywdev]

@claude — your previous run finished in 0s without doing any work. Please retry: upgrade the ARC runner image to be CI-capable (docker-compose, browsers, container actions) + add MendysRoboticsWP scale set, per the original request. Check current state of the runner image Dockerfile and ARC values before making changes — issue #335 (gh CLI install) has already merged; build on that.

[izzywdev]

⚠️ Claude responder did not run to completion

The responder errored before finishing your request, so no changes were made and no branch was created.

• Reason: Anthropic API rejected preflight (HTTP 400): Your credit balance is too low to access the Anthropic API. Please go to Plans & Billing to upgrade or purchase credits.
• Run log: https://github.com/izzywdev/FuzeInfra/actions/runs/29936971280

This notice is automated and will not retry on its own — the responder stops after one failure and waits. If this looks like an API-side problem (key revoked / out of credits / model or 1M-context beta not entitled / Anthropic outage), an operator should check the ANTHROPIC_API_KEY secret and fund/repair the Anthropic account first, then re-trigger by posting a new comment mentioning the responder.

[izzywdev]

Partial resolution:

Most of the runner capability asks have been implemented in the ARC runner image (Dockerfile):

• ✅ Docker Compose v2 plugin + buildx (PR merged — docker compose version works)
• ✅ gh CLI (PR feat(runner): install gh CLI in ARC runner image #335)
• ✅ Playwright browser OS deps (baked in — consumers just run npx playwright install <browser>)
• ✅ Python 3.10/3.11 + Node 20 in hostedtoolcache (tool-cache warm, setup-python/setup-node work offline)
• ✅ dind mode with explicit command: ["/home/runner/run.sh"] documented

Still remaining:

• ❌ MendysRoboticsWP cross-repo scale set — not configured (no mendysroboticswp scale set exists)
• ❌ Namespace annotation fuzeinfra.io/owner-repo=izzywdev/MendysRobotics on mendys-prod and mendys-wp namespaces (needed for crit-log routing from Route mendys-prod / mendys-wp error-log alerts to @claude issues in izzywdev/MendysRobotics #249)

Leaving open for these two remaining items.