The AutoscalingListener is continuous recreating Role + RoleBinding with names runner-79858bbc-listener in autoscaling namespace (ArgoCD out of sync)

[andreaspodskalsky]

Checks

• I've already read https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners-with-actions-runner-controller/troubleshooting-actions-runner-controller-errors and I'm sure my issue is not covered in the troubleshooting guide.
• I am using charts that are officially provided

Controller Version

0.13.0

Deployment Method

Helm

Checks

• This isn't a question or user support case (For Q&A and community support, go to Discussions).
• I've read the Changelog before submitting this issue and I'm sure it's not due to any recently-introduced backward-incompatible changes

To Reproduce

1. We are using ArgoCD 3.0.0 and the Helm Charts for deployment of the gha-runner-scale-set-controller
2. The gha-runner-scale-set-controller is runinng in one namespace xxx
3. The autoscalset is using `kubernetes` mode
4. The autoscalset ins deployed in another namespace zzz
5. After deployment of the autoscaleset ArgoCD is `out of sync`; because of Role + RoleBinding with names `runner-79858bbc-listener` in namespace zzz:  `OutOfSync (This resource is not present in the application's source. It will be deleted from Kubernetes if the prune option is enabled during sync.)`
6. The `AutoscalingListener` in namespace xxx is not stopping to recreate these resources.
7. I've tried to fix that with annotation 'argocd.argoproj.io/compare-options: IgnoreExtraneous' in the autoscaleset helm vales at namespace zzz, but theses settings are not handed over to `runner-79858bbc-listener` Role and RoleBinding, because they are triggerd by namespace xxx and I don't know how to add there these settings, there is no such setting in helm values.

Describe the bug

The AutoscalingListener is continuous recreating Role + RoleBinding with names runner-79858bbc-listener in autoscaling namespace.

We did not have this problem with old version 0.10.1.

Describe the expected behavior

Roles and RoleBindings are correct created and are not out of sync

Additional Context

-

Controller Logs

{"severity":"info","ts":"2025-11-26T13:04:25Z","logger":"AutoscalingListener","message":"Creating a role binding for the service account and role","version":"0.13.0","autoscalinglistener":{"name":"runner-79858bbc-listener","namespace":"xxx"}}
{"severity":"info","ts":"2025-11-26T13:04:25Z","logger":"AutoscalingListener","message":"Creating listener role binding","version":"0.13.0","autoscalinglistener":{"name":"runner-79858bbc-listener","namespace":"xxx"},"namespace":"zzz","name":"runner-79858bbc-listener","role":"runner-79858bbc-listener","serviceAccountNamespace":"xxx","serviceAccount":"runner-79858bbc-listener"}

Runner Pod Logs

-

[github-actions]

Hello! Thank you for filing an issue.

The maintainers will triage your issue shortly.

In the meantime, please take a look at the troubleshooting guide for bug reports.

If this is a feature request, please review our contribution guidelines.