From 140915b3039115d65dd8eebe222d6472d61df0a9 Mon Sep 17 00:00:00 2001
From: Gitea Bot <teabot@gitea.io>
Date: Mon, 5 Oct 2026 10:59:31 +0000
Subject: [PATCH] Update the runner reference pages (#577)

Automated update of the generated runner reference pages from gitea/runner (main for the develop docs, the newest stable tag for every documented series), opened by the "update runner reference" scheduled workflow.

<!-- cloudflare-preview --> Preview: https://pr-577.docs-gitea-com.pages.dev

Reviewed-on: https://gitea.com/gitea/docs/pulls/577
Reviewed-by: silverwind <2021+silverwind@noreply.gitea.com>
Co-authored-by: Gitea Bot <teabot@gitea.io>
---
 runner-docs/reference/cli.md            |  2 +-
 runner-docs/reference/config-example.md | 16 ++++++++++++----
 2 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/runner-docs/reference/cli.md b/runner-docs/reference/cli.md
index ae2e0be4..672eda84 100644
--- a/runner-docs/reference/cli.md
+++ b/runner-docs/reference/cli.md
@@ -109,7 +109,7 @@ Flags:
   -e, --eventpath string                 path to a JSON event payload file exposed as the event that triggered the workflow
       --gitea-instance string            Gitea instance to use.
   -h, --help                             help for exec
-  -i, --image string                     Docker image to use. Use "-self-hosted" to run directly on the host. (default "docker.gitea.com/runner-images:ubuntu-latest")
+  -i, --image string                     Docker image to use. Use "kubernetes://<image>" to run it as a pod, "-self-hosted" to run directly on the host. (default "docker.gitea.com/runner-images:ubuntu-latest")
       --input stringArray                set an input the workflow declares under its workflow_dispatch or workflow_call trigger, others stay invisible to the inputs context (e.g. --input name=bar; can be specified multiple times with highest precedence)
       --input-file string                path to an .env-format file containing key=value pairs as baseline workflow inputs (override event inputs)
       --insecure-secrets                 NOT RECOMMENDED! Doesn't hide secrets while printing logs.
diff --git a/runner-docs/reference/config-example.md b/runner-docs/reference/config-example.md
index 46809ba2..d5822c9b 100644
--- a/runner-docs/reference/config-example.md
+++ b/runner-docs/reference/config-example.md
@@ -68,12 +68,13 @@ runner:
   # scratch directories (left behind when a host cleanup delete stalls) older than
   # this duration. Setting either workdir_cleanup_age or idle_cleanup_interval to 0
   # (or any non-positive value) disables stale-directory cleanup entirely, along with
-  # the docker network and volume cleanup below.
+  # the docker and Kubernetes cleanup below.
   #workdir_cleanup_age: 24h
   # Cadence for the idle cleanup pass. Besides the directories above, on runners that use
   # docker it removes the per-job networks and volumes of jobs this runner did not live to
   # tear down, which would otherwise hold a subnet of the daemon address pool and the job's
-  # workspace contents until the host is rebuilt.
+  # workspace contents until the host is rebuilt. On runners with kubernetes labels it
+  # removes such jobs' pods and Secrets.
   #idle_cleanup_interval: 10m
   # The base interval for periodic log flush to the Gitea instance.
   # Logs may be sent earlier if the buffer reaches log_report_batch_size
@@ -121,8 +122,7 @@ runner:
   # terminal; tools like `docker build` emit redrawing progress frames into the captured log
   # when a TTY is present.
   #allocate_pty: false
-  # Image for a job whose runs-on matches none of the labels above. A runner without a
-  # docker daemon runs such a job on the host instead.
+  # Image for a job whose runs-on matches none of the labels above, see the Labels section of the README for where it runs.
   #default_image: "docker.gitea.com/runner-images:ubuntu-latest"
   # What to mount at RUNNER_TOOL_CACHE (/opt/hostedtoolcache), where setup actions install tools:
   #   none:   nothing. A docker job sees what its image ships there, a host job an empty dir, and
@@ -295,6 +295,14 @@ host:
   # If it's empty, $HOME/.cache/act/ will be used.
   #workdir_parent:
 
+# Jobs that run as Kubernetes pods, see docs/kubernetes.md.
+kubernetes:
+  #kubeconfig: ""
+  #namespace: ""
+  #pod_template: {}
+  # Pod templates merged over pod_template, in runs-on order, for jobs whose runs-on has the label they are keyed by.
+  #pod_templates: {}
+
 # Optional local task-admission checks. Disabled by default. When enabled, low
 # disk space or a failing script pauses new task fetching; existing jobs continue.
 # No health checks run while any job is active; the last result is reused until idle.