From 2999d97bff56d2bd84c3a99dd5017a21911af0f4 Mon Sep 17 00:00:00 2001 From: Grigory Panov Date: Wed, 15 Jul 2026 11:18:14 +0200 Subject: [PATCH] Use databricks-protected-runner-group for sync workflow ubuntu-latest runners use ephemeral IPs that the databricks org's IP allow list rejects, so sync-environments failed at actions/checkout with a 403 (run 29320787951). Switch to linux-ubuntu-latest, which is part of the databricks-protected-runner-group and sits inside the allowed network. Per runner-group owners in the #deco thread (DECO-27667). Co-authored-by: Isaac --- .github/workflows/sync.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml index fa36772..92c31b5 100644 --- a/.github/workflows/sync.yml +++ b/.github/workflows/sync.yml @@ -15,7 +15,10 @@ permissions: jobs: sync: - runs-on: ubuntu-latest + # GitHub-hosted ubuntu-latest runners use ephemeral IPs that the databricks org's + # IP allow list rejects (checkout fails with a 403). linux-ubuntu-latest is part of + # the databricks-protected-runner-group, which is inside the allowed network. + runs-on: linux-ubuntu-latest timeout-minutes: 15 steps: - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1