SetUp failed for volume "listener-config"

[Insofan]

Checks

• I've already read https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners-with-actions-runner-controller/troubleshooting-actions-runner-controller-errors and I'm sure my issue is not covered in the troubleshooting guide.
• I am using charts that are officially provided

Controller Version

0.13.0

Deployment Method

Helm

Checks

• This isn't a question or user support case (For Q&A and community support, go to Discussions).
• I've read the Changelog before submitting this issue and I'm sure it's not due to any recently-introduced backward-incompatible changes

To Reproduce

Run github's tutorial on my k3s nodes
`
                echo "Install ingcontroller..."
                KUBECONFIG_PATH="./.output/k3s.yaml" 

                NAMESPACE="arc-systems"
                helm install arc \
                    --namespace "${NAMESPACE}" \
                    --create-namespace \
                    --kubeconfig="${KUBECONFIG_PATH}" \
                    oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set-controller

                echo "Installing runner..."
                INSTALLATION_NAME="arc-runner-set"
                NAMESPACE="arc-runners"
                GITHUB_CONFIG_URL="https://github.com/xxxxxx"
                GITHUB_PAT="ghp_xxxxxxxxxxxxx"
                helm install "${INSTALLATION_NAME}" \
                    --namespace "${NAMESPACE}" \
                    --create-namespace \
                    --kubeconfig="${KUBECONFIG_PATH}" \
                    --set githubConfigUrl="${GITHUB_CONFIG_URL}" \
                    --set githubConfigSecret.github_token="${GITHUB_PAT}" \
                    oci://ghcr.io/actions/actions-runner-controller-charts/gha-runner-scale-set
`
arc-runner-set-754b578d-listener pod warning message MountVolume.SetUp failed for volume "listener-config" : secret "arc-runner-set-754b578d-listener-config" not found. (4m39s).
Runner offline

Describe the bug

I have tried all the ways I can find on github, include some most stars repo, always error.

Describe the expected behavior

Just let github runner online.

Additional Context

I tried many values, but error, so I follow the tutorial get the MountVolume.SetUp failed for volume "listener-config" : secret "arc-runner-set-754b578d-listener-config" not found. (10m) error

Controller Logs

2025-12-13T09:08:57Z    ERROR   AutoscalingListener     Unable to create listener role  {"version": "0.13.0", "autoscalinglistener": {"name":"bull-bull-runner-696d8f77-listener","namespace":"actions-runner"}, "namespace": "actions-runner", "name": "bull-bull-runner-696d8f77-listener", "rules": [{"verbs":["patch"],"apiGroups":["actions.github.com"],"resources":["ephemeralrunnersets"],"resourceNames":["bull-bull-runner-6ps4k"]},{"verbs":["patch"],"apiGroups":["actions.github.com"],"resources":["ephemeralrunners","ephemeralrunners/status"]}], "error": "roles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:actions-runner:actions-runner-controller-gha-rs-controller\" cannot create resource \"roles\" in API group \"rbac.authorization.k8s.io\" in the namespace \"actions-runner\""}
github.com/actions/actions-runner-controller/controllers/actions%2egithub%2ecom.(*AutoscalingListenerReconciler).createRoleForListener
        github.com/actions/actions-runner-controller/controllers/actions.github.com/autoscalinglistener_controller.go:589
github.com/actions/actions-runner-controller/controllers/actions%2egithub%2ecom.(*AutoscalingListenerReconciler).Reconcile
        github.com/actions/actions-runner-controller/controllers/actions.github.com/autoscalinglistener_controller.go:170
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:216
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:461
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:421
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func1.1
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:296
2025-12-13T09:08:57Z    ERROR   Reconciler error        {"controller": "autoscalinglistener", "controllerGroup": "actions.github.com", "controllerKind": "AutoscalingListener", "AutoscalingListener": {"name":"bull-bull-runner-696d8f77-listener","namespace":"actions-runner"}, "namespace": "actions-runner", "name": "bull-bull-runner-696d8f77-listener", "reconcileID": "c1762ecc-8557-4091-9a50-62c056a79b6d", "error": "roles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:actions-runner:actions-runner-controller-gha-rs-controller\" cannot create resource \"roles\" in API group \"rbac.authorization.k8s.io\" in the namespace \"actions-runner\""}
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:474
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:421
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func1.1
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:296
2025-12-13T09:08:57Z    INFO    AutoscalingListener     Creating a role for the listener pod    {"version": "0.13.0", "autoscalinglistener": {"name":"bull-bull-runner-696d8f77-listener","namespace":"actions-runner"}}
2025-12-13T09:08:57Z    INFO    AutoscalingListener     Creating listener role  {"version": "0.13.0", "autoscalinglistener": {"name":"bull-bull-runner-696d8f77-listener","namespace":"actions-runner"}, "namespace": "actions-runner", "name": "bull-bull-runner-696d8f77-listener", "rules": [{"verbs":["patch"],"apiGroups":["actions.github.com"],"resources":["ephemeralrunnersets"],"resourceNames":["bull-bull-runner-6ps4k"]},{"verbs":["patch"],"apiGroups":["actions.github.com"],"resources":["ephemeralrunners","ephemeralrunners/status"]}]}
2025-12-13T09:08:57Z    ERROR   AutoscalingListener     Unable to create listener role  {"version": "0.13.0", "autoscalinglistener": {"name":"bull-bull-runner-696d8f77-listener","namespace":"actions-runner"}, "namespace": "actions-runner", "name": "bull-bull-runner-696d8f77-listener", "rules": [{"verbs":["patch"],"apiGroups":["actions.github.com"],"resources":["ephemeralrunnersets"],"resourceNames":["bull-bull-runner-6ps4k"]},{"verbs":["patch"],"apiGroups":["actions.github.com"],"resources":["ephemeralrunners","ephemeralrunners/status"]}], "error": "roles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:actions-runner:actions-runner-controller-gha-rs-controller\" cannot create resource \"roles\" in API group \"rbac.authorization.k8s.io\" in the namespace \"actions-runner\""}
github.com/actions/actions-runner-controller/controllers/actions%2egithub%2ecom.(*AutoscalingListenerReconciler).createRoleForListener
        github.com/actions/actions-runner-controller/controllers/actions.github.com/autoscalinglistener_controller.go:589
github.com/actions/actions-runner-controller/controllers/actions%2egithub%2ecom.(*AutoscalingListenerReconciler).Reconcile
        github.com/actions/actions-runner-controller/controllers/actions.github.com/autoscalinglistener_controller.go:170
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:216
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:461
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:421
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func1.1
        sigs.k8s.io/controller-runtime@v0.22.3/pkg/internal/controller/controller.go:296
2025-12-13T09:08:57Z    ERROR   Reconciler error        {"controller": "autoscalinglistener", "controllerGroup": "actions.github.com", "controllerKind": "AutoscalingListener", "AutoscalingListener": {"name":"bull-bull-runner-696d8f77-listener","namespace":"actions-runner"}, "namespace": "actions-runner", "name": "bull-bull-runner-696d8f77-listener", "reconcileID": "f3d33182-e64a-4f39-a714-fa47da1f0d68", "error": "roles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:actions-runner:actions-runner-controller-gha-rs-controller\" cannot create resource \"roles\" in API group \"rbac.authorization.k8s.io\" in the namespace \"actions-runner\""}

Runner Pod Logs

2025-12-13T09:09:17Z    ERROR   AutoscalingListener     Unable to create listener role  {"version": "0.13.0", "autoscalinglistener": {"name":"bull-bull-runner-696d8f77-listener","namespace":"actions-runner"}, "namespace": "actions-runner", "name": "bull-bull-runner-696d8f77-listener", "rules": [{"verbs":["patch"],"apiGroups":["actions.github.com"],"resources":["ephemeralrunnersets"],"resourceNames":["bull-bull-runner-6ps4k"]},{"verbs":["patch"],"apiGroups":["actions.github.com"],"resources":["ephemeralrunners","ephemeralrunners/status"]}], "error": "roles.rbac.authorization.k8s.io is forbidden: User \"system:serviceaccount:actions-runner:actions-runner-controller-gha-rs-controller\" cannot create resource \"roles\" in API group \"rbac.authorization.k8s.io\" in the namespace \"actions-runner\""}
Or 
MountVolume.SetUp failed for volume "listener-config" : secret "arc-runner-set-754b578d-listener-config" not found. (7m42s)

[github-actions]

Hello! Thank you for filing an issue.

The maintainers will triage your issue shortly.

In the meantime, please take a look at the troubleshooting guide for bug reports.

If this is a feature request, please review our contribution guidelines.