kube-cascade/gitea/runner.yaml
James Andariese 1724f21938 add gitea to kustomize
also fix gitea runners and add automated docker login to runners
2024-02-25 19:53:34 -06:00

82 lines
2.1 KiB
YAML

apiVersion: apps/v1
kind: StatefulSet
metadata:
labels:
app: gitea
gitea: runner
name: runner
namespace: gitea
annotations:
reloader.stakater.com/auto: "true"
spec:
podManagementPolicy: OrderedReady
replicas: 4
selector:
matchLabels:
app: gitea
gitea: runner
serviceName: runner
updateStrategy:
type: RollingUpdate
template:
metadata:
labels:
app: gitea
gitea: runner
spec:
securityContext:
fsGroup: 1000
volumes:
- name: gitea-package-registry-secret
secret:
secretName: gitea-package-registry-secret
- name: gitea-runner-config
configMap:
name: gitea-runner-config
containers:
- image: jamesandariese/act_runner_node:latest
imagePullPolicy: Always
name: runner
env:
- name: DOCKER_HOST
value: tcp://localhost:2376
- name: DOCKER_CERT_PATH
value: /certs/client
- name: DOCKER_TLS_VERIFY
value: "1"
- name: DOCKER_REGISTRY
value: git.strudelline.net
- name: CONFIG_FILE
value: /config/config.yaml
- name: GITEA_INSTANCE_URL
value: http://gitea.gitea.svc.cluster.local:3000
- name: GITEA_RUNNER_REGISTRATION_TOKEN
valueFrom:
secretKeyRef:
name: gitea-runner-token
key: token
volumeMounts:
- mountPath: /data
name: gitea-runner-data
- mountPath: /config
name: gitea-runner-config
readOnly: true
- mountPath: /home/rootless/.docker/config.json
subPath: .dockerconfigjson
name: gitea-package-registry-secret
readOnly: true
securityContext:
privileged: true
restartPolicy: Always
dnsPolicy: ClusterFirst
volumeClaimTemplates:
- metadata:
name: gitea-runner-data
spec:
accessModes: [ "ReadWriteOnce" ]
storageClassName: local-path
resources:
requests:
storage: 10Gi