GitLab Shared Runners in WMCS use puppet class profile::gitlab::runner. Trusted Runners and Runners in test project devtools use role::gitlab_runner.
This means the runners use a slightly different configuration. The role::gitlab_runner also contains (see):
include profile::base::production include profile::base::firewall include profile::gitlab::runner
We should try to align all of the runner configuration to make sure all runner use the same config and to prevent unexpected behavior. The firewall configuration between profile and role is quite different. I'd suggest to migrate Shared Runners to role::gitlab_runner as well.
@brennen @Dzahn is there a reason the Shared Runners are using a profile instead of a role?
In some recent discussion we talked about Shared Runners in WMCS being end-of-life. So we can also close this task with "won't fix" depending on the expected time frame of that migration.