mirror of
https://gitea.com/gitea/runner.git
synced 2026-11-04 14:35:32 +00:00
silverwind
41f1e08bec
Renovate gets no release timestamps for Docker Hub images with more than 1000 tags (https://github.com/renovatebot/renovate/issues/46925) or for quay.io, so the 5-day minimum release age holds them back forever. The e2e workflows, the Kubernetes examples and the toolkit test pins are outside its managers, so these are bumped by hand. The builder follows the current Alpine instead of the frozen 3.23. Reviewed-on: https://gitea.com/gitea/runner/pulls/1330 Reviewed-by: bircni <[email protected]> Co-authored-by: silverwind <[email protected]>
102 lines
2.7 KiB
YAML
102 lines
2.7 KiB
YAML
# Holds the runner's working directory (/data): the .runner registration file
|
|
# and, optionally, the config file.
|
|
kind: PersistentVolumeClaim
|
|
apiVersion: v1
|
|
metadata:
|
|
name: runner-vol
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 1Gi
|
|
storageClassName: standard
|
|
---
|
|
# Holds the Docker daemon's data root (/var/lib/docker), i.e. the images pulled
|
|
# for jobs. Without it, the image cache is lost whenever the pod is recreated
|
|
# and every job re-pulls its images. Size it for the images you expect to cache.
|
|
kind: PersistentVolumeClaim
|
|
apiVersion: v1
|
|
metadata:
|
|
name: docker-vol
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 20Gi
|
|
storageClassName: standard
|
|
---
|
|
apiVersion: v1
|
|
data:
|
|
# The registration token can be obtained from the web UI, API or command-line.
|
|
# You can also set a pre-defined global runner registration token for the Gitea instance via
|
|
# `GITEA_RUNNER_REGISTRATION_TOKEN`/`GITEA_RUNNER_REGISTRATION_TOKEN_FILE` environment variable.
|
|
token: << base64 encoded registration token >>
|
|
kind: Secret
|
|
metadata:
|
|
name: runner-secret
|
|
type: Opaque
|
|
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
labels:
|
|
app: runner
|
|
name: runner
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: runner
|
|
strategy: {}
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: runner
|
|
spec:
|
|
restartPolicy: Always
|
|
terminationGracePeriodSeconds: 10800 # keep above runner.shutdown_timeout, see README
|
|
volumes:
|
|
- name: docker-socket
|
|
emptyDir: {}
|
|
- name: runner-data
|
|
persistentVolumeClaim:
|
|
claimName: runner-vol
|
|
- name: docker-data
|
|
persistentVolumeClaim:
|
|
claimName: docker-vol
|
|
initContainers:
|
|
- name: docker
|
|
image: docker:29.9.1-dind
|
|
securityContext:
|
|
privileged: true
|
|
volumeMounts:
|
|
- name: docker-socket
|
|
mountPath: /var/run
|
|
- name: docker-data
|
|
mountPath: /var/lib/docker
|
|
startupProbe:
|
|
exec:
|
|
command: ["/usr/bin/test", "-S", "/var/run/docker.sock"]
|
|
livenessProbe:
|
|
exec:
|
|
command: ["/usr/bin/test", "-S", "/var/run/docker.sock"]
|
|
restartPolicy: Always
|
|
containers:
|
|
- name: runner
|
|
image: gitea/runner:nightly
|
|
env:
|
|
- name: GITEA_INSTANCE_URL
|
|
value: http://gitea-http.gitea.svc.cluster.local:3000
|
|
- name: GITEA_RUNNER_REGISTRATION_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: runner-secret
|
|
key: token
|
|
volumeMounts:
|
|
- name: runner-data
|
|
mountPath: /data
|
|
- name: docker-socket
|
|
mountPath: /var/run
|