Make runner credential rotation two-phase, match labels in the claim query, and fail or stop fork jobs when no eligible runner remains or the opt-in is withdrawn.

taigrrcommitted parent 4b24839c1370d728413663b651e0e3b255e8958997c8fd9Browse files
6 files changed+107−40

Rendering diff…