mirror of
https://gitea.com/gitea/helm-actions.git
synced 2026-08-04 23:13:04 +00:00
Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 Renovate Bot
|
aebad72a90 |
@@ -8,12 +8,12 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
changelog:
|
changelog:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: docker.io/thegeeklab/git-sv:3.0.0
|
container: docker.io/thegeeklab/git-sv:2.1.3
|
||||||
steps:
|
steps:
|
||||||
- name: install tools
|
- name: install tools
|
||||||
run: |
|
run: |
|
||||||
apk add -q --update --no-cache nodejs curl jq sed
|
apk add -q --update --no-cache nodejs curl jq sed
|
||||||
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
|
- uses: actions/checkout@v7
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
- name: Generate upcoming changelog
|
- name: Generate upcoming changelog
|
||||||
|
|||||||
@@ -11,9 +11,9 @@ on:
|
|||||||
jobs:
|
jobs:
|
||||||
check-and-test:
|
check-and-test:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: commitlint/commitlint:21.2.1
|
container: commitlint/commitlint:21.1.0
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
|
- uses: actions/checkout@v7
|
||||||
- name: check PR title
|
- name: check PR title
|
||||||
run: |
|
run: |
|
||||||
echo "${{ gitea.event.pull_request.title }}" | commitlint --config .commitlintrc.json
|
echo "${{ gitea.event.pull_request.title }}" | commitlint --config .commitlintrc.json
|
||||||
|
|||||||
@@ -7,20 +7,20 @@ on:
|
|||||||
|
|
||||||
env:
|
env:
|
||||||
# renovate: datasource=docker depName=alpine/helm
|
# renovate: datasource=docker depName=alpine/helm
|
||||||
HELM_VERSION: "4.2.3"
|
HELM_VERSION: "4.2.2"
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
generate-chart-publish:
|
generate-chart-publish:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
|
- uses: actions/checkout@v7
|
||||||
|
|
||||||
- name: install Docker CLI
|
- name: install Docker CLI
|
||||||
uses: https://github.com/docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 # Gitea
|
uses: https://github.com/docker/setup-buildx-action@v4 # Gitea
|
||||||
#uses: docker/setup-buildx-action@v4 # Github / Act
|
#uses: docker/setup-buildx-action@v4 # Github / Act
|
||||||
|
|
||||||
- name: install Helm
|
- name: install Helm
|
||||||
uses: https://github.com/Azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5 # Gitea
|
uses: https://github.com/Azure/setup-helm@v5 # Gitea
|
||||||
#uses: Azure/setup-helm@v5 # Github / Act
|
#uses: Azure/setup-helm@v5 # Github / Act
|
||||||
with:
|
with:
|
||||||
version: "${{ env.HELM_VERSION }}"
|
version: "${{ env.HELM_VERSION }}"
|
||||||
@@ -33,7 +33,7 @@ jobs:
|
|||||||
|
|
||||||
- name: import GPG key
|
- name: import GPG key
|
||||||
id: import_gpg
|
id: import_gpg
|
||||||
uses: https://github.com/crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7 # Gitea
|
uses: https://github.com/crazy-max/ghaction-import-gpg@v7 # Gitea
|
||||||
#uses: crazy-max/ghaction-import-gpg@v7 # Github / Act
|
#uses: crazy-max/ghaction-import-gpg@v7 # Github / Act
|
||||||
with:
|
with:
|
||||||
gpg_private_key: ${{ secrets.GPGSIGN_KEY }}
|
gpg_private_key: ${{ secrets.GPGSIGN_KEY }}
|
||||||
@@ -41,7 +41,7 @@ jobs:
|
|||||||
fingerprint: CC64B1DB67ABBEECAB24B6455FC346329753F4B0
|
fingerprint: CC64B1DB67ABBEECAB24B6455FC346329753F4B0
|
||||||
|
|
||||||
- name: log into Docker Hub
|
- name: log into Docker Hub
|
||||||
uses: https://github.com/docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 # Gitea
|
uses: https://github.com/docker/login-action@v4 # Gitea
|
||||||
#uses: docker/login-action@v4 # Github / Act
|
#uses: docker/login-action@v4 # Github / Act
|
||||||
with:
|
with:
|
||||||
username: ${{ secrets.DOCKER_CHARTS_USERNAME }}
|
username: ${{ secrets.DOCKER_CHARTS_USERNAME }}
|
||||||
@@ -68,7 +68,7 @@ jobs:
|
|||||||
TAR_OPTIONS: "--wildcards"
|
TAR_OPTIONS: "--wildcards"
|
||||||
|
|
||||||
- name: aws credential configure
|
- name: aws credential configure
|
||||||
uses: https://github.com/aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6 # Gitea
|
uses: https://github.com/aws-actions/configure-aws-credentials@v6 # Gitea
|
||||||
#uses: aws-actions/configure-aws-credentials@v6 # Github / Act
|
#uses: aws-actions/configure-aws-credentials@v6 # Github / Act
|
||||||
with:
|
with:
|
||||||
aws-access-key-id: ${{ secrets.AWS_KEY_ID }}
|
aws-access-key-id: ${{ secrets.AWS_KEY_ID }}
|
||||||
@@ -79,13 +79,3 @@ jobs:
|
|||||||
if: startsWith(github.ref, 'refs/tags/')
|
if: startsWith(github.ref, 'refs/tags/')
|
||||||
run: |
|
run: |
|
||||||
aws s3 sync actions/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/
|
aws s3 sync actions/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/
|
||||||
|
|
||||||
- name: Copy files to Cloudflare R2
|
|
||||||
env:
|
|
||||||
AWS_ACCESS_KEY_ID: ${{ secrets.CLOUDFLARE_R2_ACCESS_KEY_ID }}
|
|
||||||
AWS_SECRET_ACCESS_KEY: ${{ secrets.CLOUDFLARE_R2_SECRET_ACCESS_KEY }}
|
|
||||||
AWS_DEFAULT_REGION: auto
|
|
||||||
CLOUDFLARE_R2_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_R2_ACCOUNT_ID }}
|
|
||||||
CLOUDFLARE_R2_BUCKET: ${{ secrets.CLOUDFLARE_R2_BUCKET }}
|
|
||||||
run: |
|
|
||||||
aws s3 sync actions/ s3://${CLOUDFLARE_R2_BUCKET}/charts/ --endpoint-url https://${CLOUDFLARE_R2_ACCOUNT_ID}.r2.cloudflarestorage.com
|
|
||||||
|
|||||||
@@ -9,6 +9,6 @@ jobs:
|
|||||||
shellcheck:
|
shellcheck:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
|
- uses: actions/checkout@v7
|
||||||
- run: apt update --yes && apt install --yes shellcheck
|
- run: apt update --yes && apt install --yes shellcheck
|
||||||
- run: find . -type f -name "*.sh" -exec shellcheck -a {} \;
|
- run: find . -type f -name "*.sh" -exec shellcheck -a {} \;
|
||||||
|
|||||||
@@ -11,22 +11,22 @@ name: check-and-test
|
|||||||
|
|
||||||
env:
|
env:
|
||||||
# renovate: datasource=github-releases depName=helm-unittest/helm-unittest
|
# renovate: datasource=github-releases depName=helm-unittest/helm-unittest
|
||||||
HELM_UNITTEST_VERSION: "v1.1.2"
|
HELM_UNITTEST_VERSION: "v1.1.1"
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
check-and-test:
|
check-and-test:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
container: alpine/helm:4.2.3
|
container: alpine/helm:4.2.2
|
||||||
steps:
|
steps:
|
||||||
- name: install tools
|
- name: install tools
|
||||||
run: |
|
run: |
|
||||||
apk update
|
apk update
|
||||||
apk add --update bash make nodejs npm yamllint ncurses
|
apk add --update bash make nodejs npm yamllint ncurses
|
||||||
- name: Install pnpm
|
- name: Install pnpm
|
||||||
uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
|
uses: pnpm/action-setup@v6
|
||||||
with:
|
with:
|
||||||
version: 11
|
version: 11
|
||||||
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
|
- uses: actions/checkout@v7
|
||||||
- name: install chart dependencies
|
- name: install chart dependencies
|
||||||
run: helm dependency build
|
run: helm dependency build
|
||||||
- name: lint
|
- name: lint
|
||||||
@@ -49,4 +49,4 @@ jobs:
|
|||||||
git diff --exit-code --name-only README.md
|
git diff --exit-code --name-only README.md
|
||||||
- name: yaml lint
|
- name: yaml lint
|
||||||
# uses: ibiqlik/action-yamllint@v3 # Github / Act
|
# uses: ibiqlik/action-yamllint@v3 # Github / Act
|
||||||
uses: https://github.com/ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c # v3 # Gitea
|
uses: https://github.com/ibiqlik/action-yamllint@v3 # Gitea
|
||||||
|
|||||||
@@ -29,16 +29,6 @@ Deploy with your values, make sure the path is correct:
|
|||||||
helm upgrade --install gitea-actions gitea-charts/actions -f values.yaml
|
helm upgrade --install gitea-actions gitea-charts/actions -f values.yaml
|
||||||
```
|
```
|
||||||
|
|
||||||
Alternatively:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
helm upgrade --install gitea-actions gitea-charts/actions \
|
|
||||||
--set enabled=true \
|
|
||||||
--set giteaRootURL=https://gitea.com \
|
|
||||||
--set existingSecret=foo \
|
|
||||||
--set existingSecretKey=bar
|
|
||||||
```
|
|
||||||
|
|
||||||
You should be good to go!
|
You should be good to go!
|
||||||
|
|
||||||
### Runner Token Secret Template
|
### Runner Token Secret Template
|
||||||
@@ -65,62 +55,56 @@ If `.Values.statefulset.dind.rootless: true` is set, then the following will be
|
|||||||
|
|
||||||
### Gitea Actions
|
### Gitea Actions
|
||||||
|
|
||||||
For resource limit examples (runner vs DinD), see [docs/resources.md](./docs/resources.md).
|
| Name | Description | Value |
|
||||||
|
| -------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------ |
|
||||||
| Name | Description | Value |
|
| `enabled` | Create a Gitea Runner StatefulSet. | `false` |
|
||||||
| -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------ |
|
| `statefulset.replicas` | the amount of (replica) runner pods deployed | `1` |
|
||||||
| `enabled` | Create a Gitea Runner StatefulSet. | `false` |
|
| `statefulset.timezone` | is the timezone that will be set in the runner image | `Etc/UTC` |
|
||||||
| `statefulset.replicas` | the amount of (replica) runner pods deployed | `1` |
|
| `statefulset.annotations` | Gitea Runner annotations | `{}` |
|
||||||
| `statefulset.timezone` | is the timezone that will be set in the runner image | `Etc/UTC` |
|
| `statefulset.labels` | Gitea Runner labels | `{}` |
|
||||||
| `statefulset.annotations` | Gitea Runner annotations | `{}` |
|
| `statefulset.resources` | Gitea Runner resources | `{}` |
|
||||||
| `statefulset.labels` | Gitea Runner labels | `{}` |
|
| `statefulset.nodeSelector` | NodeSelector for the statefulset | `{}` |
|
||||||
| `statefulset.resources` | Shared resource requests/limits for both containers. Overridden by statefulset.runner.resources and statefulset.dind.resources. See docs/resources.md. | `{}` |
|
| `statefulset.tolerations` | Tolerations for the statefulset | `[]` |
|
||||||
| `statefulset.nodeSelector` | NodeSelector for the statefulset | `{}` |
|
| `statefulset.affinity` | Affinity for the statefulset | `{}` |
|
||||||
| `statefulset.tolerations` | Tolerations for the statefulset | `[]` |
|
| `statefulset.extraVolumes` | Extra volumes for the statefulset | `[]` |
|
||||||
| `statefulset.affinity` | Affinity for the statefulset | `{}` |
|
| `statefulset.persistence.size` | Size for persistence to store Gitea Runner data | `1Gi` |
|
||||||
| `statefulset.extraVolumes` | Extra volumes for the statefulset | `[]` |
|
| `statefulset.securityContext` | Customize the SecurityContext | `{}` |
|
||||||
| `statefulset.persistence.size` | Size for persistence to store Gitea Runner data | `1Gi` |
|
| `statefulset.serviceAccountName` | Customize the service account name | `""` |
|
||||||
| `statefulset.securityContext` | Customize the SecurityContext | `{}` |
|
| `statefulset.runtimeClassName` | Select a different RuntimeClass for pods | `""` |
|
||||||
| `statefulset.serviceAccountName` | Customize the service account name | `""` |
|
| `statefulset.hostAliases` | Inject entries into the /etc/hosts file | `[]` |
|
||||||
| `statefulset.runtimeClassName` | Select a different RuntimeClass for pods | `""` |
|
| `statefulset.persistence.size` | Size for persistence to store Gitea Runner data | `1Gi` |
|
||||||
| `statefulset.hostAliases` | Inject entries into the /etc/hosts file | `[]` |
|
| `statefulset.runner.registry` | image registry, e.g. gcr.io,docker.io | `docker.gitea.com` |
|
||||||
| `statefulset.persistence.size` | Size for persistence to store Gitea Runner data | `1Gi` |
|
| `statefulset.runner.repository` | The Gitea Runner image | `runner` |
|
||||||
| `statefulset.runner.registry` | image registry, e.g. gcr.io,docker.io | `docker.gitea.com` |
|
| `statefulset.runner.tag` | The Gitea Runner tag | `1.0.6` |
|
||||||
| `statefulset.runner.repository` | The Gitea Runner image | `runner` |
|
| `statefulset.runner.digest` | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest` | `""` |
|
||||||
| `statefulset.runner.tag` | The Gitea Runner tag | `2.0.1` |
|
| `statefulset.runner.pullPolicy` | The Gitea Runner pullPolicy | `IfNotPresent` |
|
||||||
| `statefulset.runner.digest` | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest` | `""` |
|
| `statefulset.runner.fullOverride` | Completely overrides the image registry, path/image, tag and digest. | `""` |
|
||||||
| `statefulset.runner.pullPolicy` | The Gitea Runner pullPolicy | `IfNotPresent` |
|
| `statefulset.runner.extraVolumeMounts` | Allows mounting extra volumes in the Gitea Runner container | `[]` |
|
||||||
| `statefulset.runner.fullOverride` | Completely overrides the image registry, path/image, tag and digest. | `""` |
|
| `statefulset.runner.extraEnvs` | Allows adding custom environment variables | `[]` |
|
||||||
| `statefulset.runner.resources` | Resource requests/limits for the runner container. Takes precedence over statefulset.resources when set. | `{}` |
|
| `statefulset.runner.flushCache` | whether to clear the .runner (cache) file by creating an extra init container, can slightly increase boot-up time | `false` |
|
||||||
| `statefulset.runner.extraVolumeMounts` | Allows mounting extra volumes in the Gitea Runner container | `[]` |
|
| `statefulset.runner.config` | Gitea Runner custom configuration. See [Gitea Runner documentation](https://docs.gitea.com/usage/actions/act-runner#configuration) for details. | `Too complex. See values.yaml` |
|
||||||
| `statefulset.runner.extraEnvs` | Allows adding custom environment variables | `[]` |
|
| `statefulset.dind.rootless` | a simple flag to let helm know we are dealing with a rootless dind container | `false` |
|
||||||
| `statefulset.runner.flushCache` | whether to clear the .runner (cache) file by creating an extra init container, can slightly increase boot-up time | `false` |
|
| `statefulset.dind.uid` | a field to set the running user id for the rootless dind container, so it knows where to look for the socket | `""` |
|
||||||
| `statefulset.runner.config` | Gitea Runner custom configuration. See [Gitea Runner documentation](https://docs.gitea.com/usage/actions/act-runner#configuration) for details. | `Too complex. See values.yaml` |
|
| `statefulset.dind.registry` | image registry, e.g. gcr.io,docker.io | `docker.io` |
|
||||||
| `statefulset.dind.rootless` | a simple flag to let helm know we are dealing with a rootless dind container | `false` |
|
| `statefulset.dind.repository` | The Docker-in-Docker image | `docker` |
|
||||||
| `statefulset.dind.uid` | a field to set the running user id for the rootless dind container, so it knows where to look for the socket | `""` |
|
| `statefulset.dind.tag` | The Docker-in-Docker image tag | `29.5.2-dind` |
|
||||||
| `statefulset.dind.registry` | image registry, e.g. gcr.io,docker.io | `docker.io` |
|
| `statefulset.dind.digest` | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest` | `""` |
|
||||||
| `statefulset.dind.repository` | The Docker-in-Docker image | `docker` |
|
| `statefulset.dind.fullOverride` | Completely overrides the image registry, path/image, tag and digest. | `""` |
|
||||||
| `statefulset.dind.tag` | The Docker-in-Docker image tag | `29.5.2-dind` |
|
| `statefulset.dind.pullPolicy` | The Docker-in-Docker pullPolicy | `IfNotPresent` |
|
||||||
| `statefulset.dind.digest` | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest` | `""` |
|
| `statefulset.dind.extraVolumeMounts` | Allows mounting extra volumes in the Docker-in-Docker container | `[]` |
|
||||||
| `statefulset.dind.fullOverride` | Completely overrides the image registry, path/image, tag and digest. | `""` |
|
| `statefulset.dind.extraEnvs` | Allows adding custom environment variables, such as `DOCKER_IPTABLES_LEGACY` | `[]` |
|
||||||
| `statefulset.dind.pullPolicy` | The Docker-in-Docker pullPolicy | `IfNotPresent` |
|
| `statefulset.dind.extraArgs` | Allows adding custom arguments to the Docker Daemon | `[]` |
|
||||||
| `statefulset.dind.resources` | Resource requests/limits for the DinD sidecar container. Takes precedence over statefulset.resources when set. | `{}` |
|
|
||||||
| `statefulset.dind.extraVolumeMounts` | Allows mounting extra volumes in the Docker-in-Docker container | `[]` |
|
|
||||||
| `statefulset.dind.extraEnvs` | Allows adding custom environment variables, such as `DOCKER_IPTABLES_LEGACY` | `[]` |
|
|
||||||
| `statefulset.dind.extraArgs` | Allows adding custom arguments to the Docker Daemon | `[]` |
|
|
||||||
|
|
||||||
### Gitea Actions Init
|
### Gitea Actions Init
|
||||||
|
|
||||||
| Name | Description | Value |
|
| Name | Description | Value |
|
||||||
| ----------------------------------- | ---------------------------------------------------------------------------------------------------------- | -------------- |
|
| ------------------------- | ---------------------------------------------------------------------------------------------------------- | -------------- |
|
||||||
| `init.image.registry` | Image registry, e.g. gcr.io,docker.io | `""` |
|
| `init.image.registry` | image registry, e.g. gcr.io,docker.io | `""` |
|
||||||
| `init.image.repository` | The init image (default: busyboxy but can be changed to alpine e.g.) | `busybox` |
|
| `init.image.repository` | The init image | `busybox` |
|
||||||
| `init.image.tag` | The init image tag | `1.38.0` |
|
| `init.image.tag` | the init image tag | `1.38.0` |
|
||||||
| `init.image.digest` | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest` | `""` |
|
| `init.image.digest` | Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest` | `""` |
|
||||||
| `init.image.pullPolicy` | The init image pullPolicy | `IfNotPresent` |
|
| `init.image.pullPolicy` | The init image pullPolicy | `IfNotPresent` |
|
||||||
| `init.image.fullOverride` | Completely overrides the image registry, path/image, tag and digest | `""` |
|
| `init.image.fullOverride` | Completely overrides the image registry, path/image, tag and digest. | `""` |
|
||||||
| `init.connectionCommandOverride` | Possiblity to change the command with which the container tests its connection to the Gitea server | `""` |
|
|
||||||
| `init.preConnectionCommandOverride` | Possibility to add commands that happen before the connection test loop | `""` |
|
|
||||||
|
|
||||||
### Runner Token Secret Configuration
|
### Runner Token Secret Configuration
|
||||||
|
|
||||||
|
|||||||
+1
-2
@@ -1,4 +1,3 @@
|
|||||||
# Gitea Actions Helm Chart Docs
|
# Gitea Actions Helm Chart Docs
|
||||||
|
|
||||||
- [Resource limits and capacity](./resources.md)
|
- [Share dind with job container](share-dind-with-job-container.md)
|
||||||
- [connectionCommandOverride explanation](./connectionCommandOverride.md)
|
|
||||||
@@ -0,0 +1,31 @@
|
|||||||
|
# Gitea Actions
|
||||||
|
|
||||||
|
In order to use the Gitea Actions act-runner you must either:
|
||||||
|
|
||||||
|
- enable persistence (used for automatic deployment to be able to store the token in a place accessible for the Job)
|
||||||
|
- create a secret containing the act runner token and reference it as a `existingSecret`
|
||||||
|
|
||||||
|
In order to use Gitea Actions, you must log on the server that's running Gitea and run the command:
|
||||||
|
`gitea actions generate-runner-token`
|
||||||
|
|
||||||
|
This command will out a token that is needed by the act-runner to register with the Gitea backend.
|
||||||
|
|
||||||
|
Because this is a manual operation, we automated this using a Kubernetes Job using the following containers:
|
||||||
|
|
||||||
|
1) `actions-token-create`: it uses the current `gitea-rootless` image, mounts the persistent directory to `/data/` then it saves the output from `gitea actions generate-runner-token` to `/data/actions/token`
|
||||||
|
2) `actions-token-upload`: it uses a `bitnami/kubectl` image, mounts the scripts directory (`/scripts`) and
|
||||||
|
the persistent directory (`/data/`), and using the script from `/scripts/token.sh` stores the token in a Kubernetes secret
|
||||||
|
|
||||||
|
After the token is stored in a Kubernetes secret we can create the statefulset that contains the following containers:
|
||||||
|
|
||||||
|
1) `act-runner`: authenticates with Gitea using the token that was stored in the secret
|
||||||
|
2) `dind`: DockerInDocker image that is used to run the actions
|
||||||
|
|
||||||
|
If you are not using persistent volumes, you cannot use the Job to automatically generate the token.
|
||||||
|
In this case, you can use either the Web UI to generate the token or run a shell into a Gitea pod and invoke
|
||||||
|
the command `gitea actions generate-runner-token`. After generating the token, you must create a secret and use it via:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
existingSecret: "secret-name"
|
||||||
|
existingSecretKey: "secret-key"
|
||||||
|
```
|
||||||
@@ -1,48 +0,0 @@
|
|||||||
# Using a custom connectionCommand
|
|
||||||
|
|
||||||
By default, before the container starts it tries to reach the given giteaRootURL.
|
|
||||||
Normally this is done by the busybox image using the wget binary.
|
|
||||||
|
|
||||||
However, due to [Issue #162](https://gitea.com/gitea/helm-actions/issues/162) there has been a change made where we can customize that command.
|
|
||||||
|
|
||||||
Using the `values.yaml` file by default it calls `wget --spider --no-check-certificate <your giteaRootURL>` with a timeout of 10 seconds.
|
|
||||||
But with a custom init section like detailed below we can make our check compliant with whatever certificate you have.
|
|
||||||
|
|
||||||
Assuming:
|
|
||||||
```yaml
|
|
||||||
enabled: true
|
|
||||||
giteaRootURL: https://gitea.com
|
|
||||||
existingSecret: foo
|
|
||||||
existingSecretKey: bar
|
|
||||||
|
|
||||||
init:
|
|
||||||
image:
|
|
||||||
registry: ""
|
|
||||||
repository: alpine
|
|
||||||
# Overrides the image tag whose default is the chart appVersion.
|
|
||||||
tag: "3.24"
|
|
||||||
digest: ""
|
|
||||||
pullPolicy: IfNotPresent
|
|
||||||
fullOverride: ""
|
|
||||||
|
|
||||||
connectionCommandOverride: "curl -I"
|
|
||||||
preConnectionCommandOverride: "apk add curl"
|
|
||||||
```
|
|
||||||
|
|
||||||
This now creates the following template section:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
- name: init-gitea
|
|
||||||
image: "alpine:latest"
|
|
||||||
command:
|
|
||||||
- sh
|
|
||||||
- -c
|
|
||||||
- |
|
|
||||||
apk add curl
|
|
||||||
echo 'Trying to reach Gitea on https://gitea.com'
|
|
||||||
until timeout 10 curl -I https://gitea.com; do
|
|
||||||
sleep 3
|
|
||||||
echo "Trying again in 3 seconds..."
|
|
||||||
done
|
|
||||||
echo "Gitea has been reached!"
|
|
||||||
```
|
|
||||||
@@ -1,173 +0,0 @@
|
|||||||
# Resource limits and capacity
|
|
||||||
|
|
||||||
By default, all resource values are empty (`{}`). Without explicit limits, runner pods can consume unbounded CPU and memory on a node. This guide explains how to configure resource usage properly.
|
|
||||||
|
|
||||||
## Pod architecture
|
|
||||||
|
|
||||||
Each runner pod contains two resource-consuming containers:
|
|
||||||
|
|
||||||
| Container | Role | Helm value |
|
|
||||||
| --- | --- | --- |
|
|
||||||
| `runner` | Polls Gitea and orchestrates CI jobs | `statefulset.runner.resources` |
|
|
||||||
| `dind` | Docker-in-Docker daemon; executes job containers | `statefulset.dind.resources` |
|
|
||||||
|
|
||||||
The DinD container runs as a native sidecar (`initContainer` with `restartPolicy: Always`).
|
|
||||||
|
|
||||||
## Helm resource keys
|
|
||||||
|
|
||||||
Three values control Kubernetes resource requests and limits:
|
|
||||||
|
|
||||||
| Key | Purpose |
|
|
||||||
| --- | --- |
|
|
||||||
| `statefulset.resources` | Shared fallback applied to **both** containers when no override is set |
|
|
||||||
| `statefulset.runner.resources` | Override for the `runner` container only |
|
|
||||||
| `statefulset.dind.resources` | Override for the `dind` container only |
|
|
||||||
|
|
||||||
Precedence:
|
|
||||||
|
|
||||||
```text
|
|
||||||
statefulset.runner.resources → else statefulset.resources
|
|
||||||
statefulset.dind.resources → else statefulset.resources
|
|
||||||
```
|
|
||||||
|
|
||||||
**Recommendation:** set `statefulset.runner.resources` and `statefulset.dind.resources`
|
|
||||||
explicitly instead of relying on the shared fallback. The runner process is lightweight;
|
|
||||||
DinD and CI workloads need most of the budget.
|
|
||||||
|
|
||||||
## Example: separate runner and DinD limits
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
enabled: true
|
|
||||||
giteaRootURL: https://gitea.example.com
|
|
||||||
existingSecret: runner-secret
|
|
||||||
existingSecretKey: runner-token
|
|
||||||
|
|
||||||
statefulset:
|
|
||||||
replicas: 1
|
|
||||||
|
|
||||||
runner:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 256Mi
|
|
||||||
limits:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 512Mi
|
|
||||||
config: |
|
|
||||||
log:
|
|
||||||
level: info
|
|
||||||
cache:
|
|
||||||
enabled: false
|
|
||||||
runner:
|
|
||||||
capacity: 1
|
|
||||||
container:
|
|
||||||
require_docker: true
|
|
||||||
docker_timeout: 300s
|
|
||||||
|
|
||||||
dind:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 2Gi
|
|
||||||
limits:
|
|
||||||
cpu: 2
|
|
||||||
memory: 4Gi
|
|
||||||
```
|
|
||||||
|
|
||||||
## Two layers of limiting
|
|
||||||
|
|
||||||
Kubernetes limits and act-runner job limits serve different purposes. Use both for a robust setup.
|
|
||||||
|
|
||||||
### 1. Kubernetes limits (Helm values)
|
|
||||||
|
|
||||||
These apply to the `runner` and `dind` containers in the pod.
|
|
||||||
|
|
||||||
- **`dind` limits** cap the Docker daemon and everything it runs inside the pod (images, build caches, job containers).
|
|
||||||
- **`runner` limits** cap the act-runner process itself.
|
|
||||||
|
|
||||||
If neither is set, a runaway build can exhaust the entire node.
|
|
||||||
|
|
||||||
### 2. Per-job Docker limits (`container.options`)
|
|
||||||
|
|
||||||
CI jobs run as Docker containers spawned by act-runner through the Docker socket. They are
|
|
||||||
**not** separate Kubernetes containers. Configure per-job limits in `statefulset.runner.config`
|
|
||||||
— see [act-runner configuration](https://docs.gitea.com/usage/actions/act-runner#configuration)
|
|
||||||
and [config.example.yaml](https://gitea.com/gitea/runner/src/branch/main/internal/pkg/config/config.example.yaml).
|
|
||||||
|
|
||||||
## act-runner settings that affect resource usage
|
|
||||||
|
|
||||||
Settings such as `runner.capacity` and `container.options` live in `statefulset.runner.config`, not in the Helm resource values. Refer to the runner documentation for details:
|
|
||||||
|
|
||||||
- [act-runner configuration](https://docs.gitea.com/usage/actions/act-runner#configuration)
|
|
||||||
- [config.example.yaml](https://gitea.com/gitea/runner/src/branch/main/internal/pkg/config/config.example.yaml) in the [Gitea/runner](https://gitea.com/gitea/runner) repository
|
|
||||||
|
|
||||||
When concurrent jobs or per-job Docker limits increase expected load, size `statefulset.dind.resources` accordingly on the Helm side.
|
|
||||||
|
|
||||||
## Capacity planning
|
|
||||||
|
|
||||||
These formulas apply to the Helm resource values (`statefulset.runner.resources`, `statefulset.dind.resources`, `statefulset.replicas`):
|
|
||||||
|
|
||||||
### Per pod
|
|
||||||
|
|
||||||
```text
|
|
||||||
pod budget ≈ runner.limits + dind.limits
|
|
||||||
```
|
|
||||||
|
|
||||||
### Per node
|
|
||||||
|
|
||||||
```text
|
|
||||||
node budget ≈ (runner.limits + dind.limits) × statefulset.replicas + system overhead
|
|
||||||
```
|
|
||||||
|
|
||||||
Example with the configuration above and `replicas: 3`:
|
|
||||||
|
|
||||||
- runner: 512Mi × 3 = 1.5Gi
|
|
||||||
- dind: 4Gi × 3 = 12Gi
|
|
||||||
- total: ~13.5Gi minimum, excluding other workloads on the node
|
|
||||||
|
|
||||||
Use `statefulset.nodeSelector` and `statefulset.tolerations` to place runners on dedicated nodes when needed.
|
|
||||||
|
|
||||||
## Why not only set `statefulset.resources`?
|
|
||||||
|
|
||||||
Before chart 0.1.2, one value was copied to **both** containers. **Requests** are where it
|
|
||||||
hurts most: the scheduler reserves capacity per container, and both inherit the same numbers.
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
# Only statefulset.resources — requests copied to runner AND dind:
|
|
||||||
statefulset:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 2Gi # what DinD needs…
|
|
||||||
# runner also requests 500m + 2Gi → pod ~1 CPU + ~4Gi reserved (mostly wasted)
|
|
||||||
# dind requests 500m + 2Gi ✓
|
|
||||||
```
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
statefulset:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 256Mi # what the runner actually needs…
|
|
||||||
# runner requests 100m + 256Mi ✓
|
|
||||||
# dind requests 100m + 256Mi too → tiny slot, builds starve ✗
|
|
||||||
```
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
# Separate overrides — scheduler sees the real footprint:
|
|
||||||
statefulset:
|
|
||||||
resources: {}
|
|
||||||
runner:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 256Mi
|
|
||||||
dind:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 500m
|
|
||||||
memory: 2Gi
|
|
||||||
# pod requests ~600m CPU + ~2.25Gi RAM — not 1 CPU + 4Gi, nor 200m + 512Mi
|
|
||||||
```
|
|
||||||
|
|
||||||
Limits follow the same split. Unset overrides (`{}`) still fall back to `statefulset.resources`.
|
|
||||||
@@ -0,0 +1,30 @@
|
|||||||
|
# Share dind with job container
|
||||||
|
|
||||||
|
You can weaken isolation and allow jobs to call docker commands.
|
||||||
|
|
||||||
|
## Limitations
|
||||||
|
|
||||||
|
-
|
||||||
|
|
||||||
|
## Example Values
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
config: |
|
||||||
|
log:
|
||||||
|
level: debug
|
||||||
|
cache:
|
||||||
|
enabled: false
|
||||||
|
container:
|
||||||
|
require_docker: true
|
||||||
|
docker_timeout: 300s
|
||||||
|
|
||||||
|
## Specify an existing token secret
|
||||||
|
##
|
||||||
|
existingSecret: "runner-token2"
|
||||||
|
existingSecretKey: "token"
|
||||||
|
|
||||||
|
## Specify the root URL of the Gitea instance
|
||||||
|
giteaRootURL: "http://192.168.1.2:3000"
|
||||||
|
```
|
||||||
|
|
||||||
|
Now you can run docker commands inside your jobs.
|
||||||
Generated
+53
-53
@@ -13,7 +13,7 @@ importers:
|
|||||||
version: 2.7.2
|
version: 2.7.2
|
||||||
markdownlint-cli:
|
markdownlint-cli:
|
||||||
specifier: ^0.49.0
|
specifier: ^0.49.0
|
||||||
version: 0.49.1
|
version: 0.49.0
|
||||||
|
|
||||||
packages:
|
packages:
|
||||||
|
|
||||||
@@ -47,12 +47,12 @@ packages:
|
|||||||
resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
|
resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
|
||||||
engines: {node: 18 || 20 || >=22}
|
engines: {node: 18 || 20 || >=22}
|
||||||
|
|
||||||
brace-expansion@1.1.16:
|
brace-expansion@1.1.15:
|
||||||
resolution: {integrity: sha512-IDw48K2/2kRkg9LdJxurvq3lV3aBgq0REY89duEqFRthjlPdXHKMj7EnQOXVckxzgisinf3nHfrcE2FufFLXMw==}
|
resolution: {integrity: sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==}
|
||||||
|
|
||||||
brace-expansion@5.0.8:
|
brace-expansion@5.0.7:
|
||||||
resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
|
resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
|
||||||
engines: {node: 20 || >=22}
|
engines: {node: 18 || 20 || >=22}
|
||||||
|
|
||||||
character-entities-legacy@3.0.0:
|
character-entities-legacy@3.0.0:
|
||||||
resolution: {integrity: sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==}
|
resolution: {integrity: sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==}
|
||||||
@@ -133,8 +133,8 @@ packages:
|
|||||||
resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
|
resolution: {integrity: sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==}
|
||||||
deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
|
deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
|
||||||
|
|
||||||
ignore@7.0.6:
|
ignore@7.0.5:
|
||||||
resolution: {integrity: sha512-BAg6QkE8W+TuQLrrw0Ugr7HegXduRuuj8/ti2kSOc+jz1dmx8/WNcjr6XGnq5YpDWxFwwaavqD0+jIUOKelTsw==}
|
resolution: {integrity: sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==}
|
||||||
engines: {node: '>= 4'}
|
engines: {node: '>= 4'}
|
||||||
|
|
||||||
inflight@1.0.6:
|
inflight@1.0.6:
|
||||||
@@ -144,9 +144,9 @@ packages:
|
|||||||
inherits@2.0.4:
|
inherits@2.0.4:
|
||||||
resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
|
resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
|
||||||
|
|
||||||
ini@7.0.0:
|
ini@4.1.3:
|
||||||
resolution: {integrity: sha512-ifK0CgjALofS5bkrcTy4RaQ9Vx2Knf/eLeIO+NaswQEpH1UblrtTSCIvN71qQDMq0PeQ/SSPojvEJp9vvvfr+w==}
|
resolution: {integrity: sha512-X7rqawQBvfdjS10YU1y1YVreA3SsLrW9dX2CewP2EbBJM4ypVNLDkO5y04gejPwKIY9lR+7r9gn3rFPt/kmWFg==}
|
||||||
engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
|
engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
|
||||||
|
|
||||||
is-alphabetical@2.0.1:
|
is-alphabetical@2.0.1:
|
||||||
resolution: {integrity: sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==}
|
resolution: {integrity: sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==}
|
||||||
@@ -160,8 +160,8 @@ packages:
|
|||||||
is-hexadecimal@2.0.1:
|
is-hexadecimal@2.0.1:
|
||||||
resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==}
|
resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==}
|
||||||
|
|
||||||
js-yaml@5.2.2:
|
js-yaml@4.2.0:
|
||||||
resolution: {integrity: sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==}
|
resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
|
||||||
hasBin: true
|
hasBin: true
|
||||||
|
|
||||||
jsonc-parser@3.3.1:
|
jsonc-parser@3.3.1:
|
||||||
@@ -181,24 +181,24 @@ packages:
|
|||||||
lodash@4.18.1:
|
lodash@4.18.1:
|
||||||
resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
|
resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
|
||||||
|
|
||||||
markdown-it@14.3.0:
|
markdown-it@14.2.0:
|
||||||
resolution: {integrity: sha512-RCEsPjR+sr0x+AuYp601tKTkgFG4YEPLCzHST3cQ/fhlJkqAkz1L2/Qbp1j9qw5SBwQHFBoW8+hoN5xssOF0Tw==}
|
resolution: {integrity: sha512-1TGiQiJVRQ3NPmZH6sx5Cfnmg6GQm9jvC1ch4TK511NjSJvjzKLzn5pPfZRNZkRPZP0HqCioSndqH8v2nRaWVQ==}
|
||||||
hasBin: true
|
hasBin: true
|
||||||
|
|
||||||
markdown-table@2.0.0:
|
markdown-table@2.0.0:
|
||||||
resolution: {integrity: sha512-Ezda85ToJUBhM6WGaG6veasyym+Tbs3cMAw/ZhOPqXiYsr0jgocBV3j3nx+4lk47plLlIqjwuTm/ywVI+zjJ/A==}
|
resolution: {integrity: sha512-Ezda85ToJUBhM6WGaG6veasyym+Tbs3cMAw/ZhOPqXiYsr0jgocBV3j3nx+4lk47plLlIqjwuTm/ywVI+zjJ/A==}
|
||||||
|
|
||||||
markdownlint-cli@0.49.1:
|
markdownlint-cli@0.49.0:
|
||||||
resolution: {integrity: sha512-qpYqJbSYf3jv57bdnFmCaZ/Wlu6IYHp2b6SOKrKBJ7OnPrDHIKmx4NERWH49QH9viTI6yO6raVDDn5nrf60VQQ==}
|
resolution: {integrity: sha512-vS5tWq5W91Gg33LD4pyAaXPclnz/sRvo6/RGOyDQjQ3eds2DkK6H4szUuE0M9TiRB/u/VBx1gtd9Ktrtx5WlSA==}
|
||||||
engines: {node: '>=22'}
|
engines: {node: '>=22'}
|
||||||
hasBin: true
|
hasBin: true
|
||||||
|
|
||||||
markdownlint@0.41.1:
|
markdownlint@0.41.0:
|
||||||
resolution: {integrity: sha512-qHKeU2E1bdyNAT077go2FVTNXvYcktN5IHtF6XyeD1l0PClxzSp2tUApAV14ORI8DGX4H9bNKZEzelZp4qn8IA==}
|
resolution: {integrity: sha512-xMUI3ChBuRuxuLF4ENvCZyS8z/+Jly1coUcZwErKLIB3sDj7ojpaTBa1e9YVPhSN4jGEIjYGQCldbTJS/hqS+A==}
|
||||||
engines: {node: '>=22'}
|
engines: {node: '>=22'}
|
||||||
|
|
||||||
mdurl@2.1.0:
|
mdurl@2.0.0:
|
||||||
resolution: {integrity: sha512-1+HBaOx0zi/dQWht8rNv9MYf9qqpqL/kxI0hXImU6Y547zM6Sni8BQibt7ifgMcYtQg41ao3Ivd6cnSM86inpg==}
|
resolution: {integrity: sha512-Lf+9+2r+Tdp5wXDXC4PcIBjTDtq4UKjCPMQhKIuzpJNW0b96kVqSwW0bT7FhRSfmAiFYgP+SCRvdrDozfh0U5w==}
|
||||||
|
|
||||||
micromark-core-commonmark@2.0.3:
|
micromark-core-commonmark@2.0.3:
|
||||||
resolution: {integrity: sha512-RDBrHEMSxVFLg6xvnXmb1Ayr2WzLAWjeSATAoxwKYJV94TeNavgoIdA0a9ytzDSVzBy2YKFK+emCPOEibLeCrg==}
|
resolution: {integrity: sha512-RDBrHEMSxVFLg6xvnXmb1Ayr2WzLAWjeSATAoxwKYJV94TeNavgoIdA0a9ytzDSVzBy2YKFK+emCPOEibLeCrg==}
|
||||||
@@ -298,8 +298,8 @@ packages:
|
|||||||
resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
|
resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
|
||||||
engines: {node: '>=0.10.0'}
|
engines: {node: '>=0.10.0'}
|
||||||
|
|
||||||
picomatch@4.0.5:
|
picomatch@4.0.4:
|
||||||
resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==}
|
resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
|
||||||
engines: {node: '>=12'}
|
engines: {node: '>=12'}
|
||||||
|
|
||||||
punycode.js@2.3.1:
|
punycode.js@2.3.1:
|
||||||
@@ -310,12 +310,12 @@ packages:
|
|||||||
resolution: {integrity: sha512-PV0dzCYDNfRi1jCDbJzpW7jNNDRuCOG/jI5ctQcGKt/clZD+YcPS3yIlWuTJMmESC8aevCFmWJy5wjAFgNqN6w==}
|
resolution: {integrity: sha512-PV0dzCYDNfRi1jCDbJzpW7jNNDRuCOG/jI5ctQcGKt/clZD+YcPS3yIlWuTJMmESC8aevCFmWJy5wjAFgNqN6w==}
|
||||||
engines: {node: '>=0.10'}
|
engines: {node: '>=0.10'}
|
||||||
|
|
||||||
run-con@1.3.3:
|
run-con@1.3.2:
|
||||||
resolution: {integrity: sha512-Lb7OKM9aaykzyoNiHGhSVCjZsvbyy6qDMp2vDXL+MoCfz3GfNJtHYH7uYsU3QNMyInBk++xx+EZ8xZ8Sxs5fNQ==}
|
resolution: {integrity: sha512-CcfE+mYiTcKEzg0IqS08+efdnH0oJ3zV0wSUFBNrMHMuxCtXvBCLzCJHatwuXDcu/RlhjTziTo/a1ruQik6/Yg==}
|
||||||
hasBin: true
|
hasBin: true
|
||||||
|
|
||||||
smol-toml@1.7.0:
|
smol-toml@1.6.1:
|
||||||
resolution: {integrity: sha512-aqVvWoyO21L23mb+drl4RmMXbf6N7FdHjAhTRA9ZBL7apWBgfWC16KjrASI+1p9GAroljyMHj6fK67i0UiTNvQ==}
|
resolution: {integrity: sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==}
|
||||||
engines: {node: '>= 18'}
|
engines: {node: '>= 18'}
|
||||||
|
|
||||||
string-width@8.2.1:
|
string-width@8.2.1:
|
||||||
@@ -373,12 +373,12 @@ snapshots:
|
|||||||
|
|
||||||
balanced-match@4.0.4: {}
|
balanced-match@4.0.4: {}
|
||||||
|
|
||||||
brace-expansion@1.1.16:
|
brace-expansion@1.1.15:
|
||||||
dependencies:
|
dependencies:
|
||||||
balanced-match: 1.0.2
|
balanced-match: 1.0.2
|
||||||
concat-map: 0.0.1
|
concat-map: 0.0.1
|
||||||
|
|
||||||
brace-expansion@5.0.8:
|
brace-expansion@5.0.7:
|
||||||
dependencies:
|
dependencies:
|
||||||
balanced-match: 4.0.4
|
balanced-match: 4.0.4
|
||||||
|
|
||||||
@@ -421,9 +421,9 @@ snapshots:
|
|||||||
|
|
||||||
entities@4.5.0: {}
|
entities@4.5.0: {}
|
||||||
|
|
||||||
fdir@6.5.0(picomatch@4.0.5):
|
fdir@6.5.0(picomatch@4.0.4):
|
||||||
optionalDependencies:
|
optionalDependencies:
|
||||||
picomatch: 4.0.5
|
picomatch: 4.0.4
|
||||||
|
|
||||||
fs.realpath@1.0.0: {}
|
fs.realpath@1.0.0: {}
|
||||||
|
|
||||||
@@ -438,7 +438,7 @@ snapshots:
|
|||||||
once: 1.4.0
|
once: 1.4.0
|
||||||
path-is-absolute: 1.0.1
|
path-is-absolute: 1.0.1
|
||||||
|
|
||||||
ignore@7.0.6: {}
|
ignore@7.0.5: {}
|
||||||
|
|
||||||
inflight@1.0.6:
|
inflight@1.0.6:
|
||||||
dependencies:
|
dependencies:
|
||||||
@@ -447,7 +447,7 @@ snapshots:
|
|||||||
|
|
||||||
inherits@2.0.4: {}
|
inherits@2.0.4: {}
|
||||||
|
|
||||||
ini@7.0.0: {}
|
ini@4.1.3: {}
|
||||||
|
|
||||||
is-alphabetical@2.0.1: {}
|
is-alphabetical@2.0.1: {}
|
||||||
|
|
||||||
@@ -460,7 +460,7 @@ snapshots:
|
|||||||
|
|
||||||
is-hexadecimal@2.0.1: {}
|
is-hexadecimal@2.0.1: {}
|
||||||
|
|
||||||
js-yaml@5.2.2:
|
js-yaml@4.2.0:
|
||||||
dependencies:
|
dependencies:
|
||||||
argparse: 2.0.1
|
argparse: 2.0.1
|
||||||
|
|
||||||
@@ -478,12 +478,12 @@ snapshots:
|
|||||||
|
|
||||||
lodash@4.18.1: {}
|
lodash@4.18.1: {}
|
||||||
|
|
||||||
markdown-it@14.3.0:
|
markdown-it@14.2.0:
|
||||||
dependencies:
|
dependencies:
|
||||||
argparse: 2.0.1
|
argparse: 2.0.1
|
||||||
entities: 4.5.0
|
entities: 4.5.0
|
||||||
linkify-it: 5.0.2
|
linkify-it: 5.0.2
|
||||||
mdurl: 2.1.0
|
mdurl: 2.0.0
|
||||||
punycode.js: 2.3.1
|
punycode.js: 2.3.1
|
||||||
uc.micro: 2.1.0
|
uc.micro: 2.1.0
|
||||||
|
|
||||||
@@ -491,24 +491,24 @@ snapshots:
|
|||||||
dependencies:
|
dependencies:
|
||||||
repeat-string: 1.6.1
|
repeat-string: 1.6.1
|
||||||
|
|
||||||
markdownlint-cli@0.49.1:
|
markdownlint-cli@0.49.0:
|
||||||
dependencies:
|
dependencies:
|
||||||
commander: 15.0.0
|
commander: 15.0.0
|
||||||
deep-extend: 0.6.0
|
deep-extend: 0.6.0
|
||||||
ignore: 7.0.6
|
ignore: 7.0.5
|
||||||
js-yaml: 5.2.2
|
js-yaml: 4.2.0
|
||||||
jsonc-parser: 3.3.1
|
jsonc-parser: 3.3.1
|
||||||
jsonpointer: 5.0.1
|
jsonpointer: 5.0.1
|
||||||
markdown-it: 14.3.0
|
markdown-it: 14.2.0
|
||||||
markdownlint: 0.41.1
|
markdownlint: 0.41.0
|
||||||
minimatch: 10.2.5
|
minimatch: 10.2.5
|
||||||
run-con: 1.3.3
|
run-con: 1.3.2
|
||||||
smol-toml: 1.7.0
|
smol-toml: 1.6.1
|
||||||
tinyglobby: 0.2.17
|
tinyglobby: 0.2.17
|
||||||
transitivePeerDependencies:
|
transitivePeerDependencies:
|
||||||
- supports-color
|
- supports-color
|
||||||
|
|
||||||
markdownlint@0.41.1:
|
markdownlint@0.41.0:
|
||||||
dependencies:
|
dependencies:
|
||||||
micromark: 4.0.2
|
micromark: 4.0.2
|
||||||
micromark-core-commonmark: 2.0.3
|
micromark-core-commonmark: 2.0.3
|
||||||
@@ -522,7 +522,7 @@ snapshots:
|
|||||||
transitivePeerDependencies:
|
transitivePeerDependencies:
|
||||||
- supports-color
|
- supports-color
|
||||||
|
|
||||||
mdurl@2.1.0: {}
|
mdurl@2.0.0: {}
|
||||||
|
|
||||||
micromark-core-commonmark@2.0.3:
|
micromark-core-commonmark@2.0.3:
|
||||||
dependencies:
|
dependencies:
|
||||||
@@ -698,11 +698,11 @@ snapshots:
|
|||||||
|
|
||||||
minimatch@10.2.5:
|
minimatch@10.2.5:
|
||||||
dependencies:
|
dependencies:
|
||||||
brace-expansion: 5.0.8
|
brace-expansion: 5.0.7
|
||||||
|
|
||||||
minimatch@3.1.5:
|
minimatch@3.1.5:
|
||||||
dependencies:
|
dependencies:
|
||||||
brace-expansion: 1.1.16
|
brace-expansion: 1.1.15
|
||||||
|
|
||||||
minimist@1.2.8: {}
|
minimist@1.2.8: {}
|
||||||
|
|
||||||
@@ -724,20 +724,20 @@ snapshots:
|
|||||||
|
|
||||||
path-is-absolute@1.0.1: {}
|
path-is-absolute@1.0.1: {}
|
||||||
|
|
||||||
picomatch@4.0.5: {}
|
picomatch@4.0.4: {}
|
||||||
|
|
||||||
punycode.js@2.3.1: {}
|
punycode.js@2.3.1: {}
|
||||||
|
|
||||||
repeat-string@1.6.1: {}
|
repeat-string@1.6.1: {}
|
||||||
|
|
||||||
run-con@1.3.3:
|
run-con@1.3.2:
|
||||||
dependencies:
|
dependencies:
|
||||||
deep-extend: 0.6.0
|
deep-extend: 0.6.0
|
||||||
ini: 7.0.0
|
ini: 4.1.3
|
||||||
minimist: 1.2.8
|
minimist: 1.2.8
|
||||||
strip-json-comments: 3.1.1
|
strip-json-comments: 3.1.1
|
||||||
|
|
||||||
smol-toml@1.7.0: {}
|
smol-toml@1.6.1: {}
|
||||||
|
|
||||||
string-width@8.2.1:
|
string-width@8.2.1:
|
||||||
dependencies:
|
dependencies:
|
||||||
@@ -752,8 +752,8 @@ snapshots:
|
|||||||
|
|
||||||
tinyglobby@0.2.17:
|
tinyglobby@0.2.17:
|
||||||
dependencies:
|
dependencies:
|
||||||
fdir: 6.5.0(picomatch@4.0.5)
|
fdir: 6.5.0(picomatch@4.0.4)
|
||||||
picomatch: 4.0.5
|
picomatch: 4.0.4
|
||||||
|
|
||||||
uc.micro@2.1.0: {}
|
uc.micro@2.1.0: {}
|
||||||
|
|
||||||
|
|||||||
@@ -116,13 +116,6 @@ Create image for the Gitea Actions Act Runner
|
|||||||
{{ include "gitea.actions.common.image" (dict "root" . "image" .Values.statefulset.runner) }}
|
{{ include "gitea.actions.common.image" (dict "root" . "image" .Values.statefulset.runner) }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
|
||||||
Resolve resource requests/limits for the runner container.
|
|
||||||
*/}}
|
|
||||||
{{- define "gitea.actions.runner.resources" -}}
|
|
||||||
{{- toYaml (default .Values.statefulset.resources .Values.statefulset.runner.resources) -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Create image for DinD
|
Create image for DinD
|
||||||
*/}}
|
*/}}
|
||||||
@@ -130,13 +123,6 @@ Create image for DinD
|
|||||||
{{ include "gitea.actions.common.image" (dict "root" . "image" .Values.statefulset.dind) }}
|
{{ include "gitea.actions.common.image" (dict "root" . "image" .Values.statefulset.dind) }}
|
||||||
{{- end -}}
|
{{- end -}}
|
||||||
|
|
||||||
{{/*
|
|
||||||
Resolve resource requests/limits for the DinD container.
|
|
||||||
*/}}
|
|
||||||
{{- define "gitea.actions.dind.resources" -}}
|
|
||||||
{{- toYaml (default .Values.statefulset.resources .Values.statefulset.dind.resources) -}}
|
|
||||||
{{- end -}}
|
|
||||||
|
|
||||||
{{/*
|
{{/*
|
||||||
Create image for Init
|
Create image for Init
|
||||||
*/}}
|
*/}}
|
||||||
|
|||||||
@@ -66,21 +66,14 @@ spec:
|
|||||||
- mountPath: /data
|
- mountPath: /data
|
||||||
name: data-runner
|
name: data-runner
|
||||||
{{- end }}
|
{{- end }}
|
||||||
- name: reach-gitea
|
- name: init-gitea
|
||||||
image: "{{ include "gitea.actions.init.image" . }}"
|
image: "{{ include "gitea.actions.init.image" . }}"
|
||||||
command:
|
command:
|
||||||
- sh
|
- sh
|
||||||
- -c
|
- -c
|
||||||
- |
|
- |
|
||||||
{{- if .Values.init.preConnectionCommandOverride }}
|
|
||||||
{{ .Values.init.preConnectionCommandOverride }}
|
|
||||||
{{- end }}
|
|
||||||
echo 'Trying to reach Gitea on {{ include "gitea.actions.local_root_url" . }}'
|
echo 'Trying to reach Gitea on {{ include "gitea.actions.local_root_url" . }}'
|
||||||
{{- if .Values.init.connectionCommandOverride }}
|
|
||||||
until timeout 10 {{ .Values.init.connectionCommandOverride }} {{ include "gitea.actions.local_root_url" . }}; do
|
|
||||||
{{- else }}
|
|
||||||
until timeout 10 wget --no-check-certificate --spider {{ include "gitea.actions.local_root_url" . }}; do
|
until timeout 10 wget --no-check-certificate --spider {{ include "gitea.actions.local_root_url" . }}; do
|
||||||
{{- end }}
|
|
||||||
sleep 3
|
sleep 3
|
||||||
echo "Trying again in 3 seconds..."
|
echo "Trying again in 3 seconds..."
|
||||||
done
|
done
|
||||||
@@ -120,7 +113,7 @@ spec:
|
|||||||
- /var/run/docker.sock
|
- /var/run/docker.sock
|
||||||
{{- end }}
|
{{- end }}
|
||||||
resources:
|
resources:
|
||||||
{{- include "gitea.actions.dind.resources" . | nindent 12 }}
|
{{- toYaml .Values.statefulset.resources | nindent 12 }}
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
{{- if .Values.statefulset.dind.rootless }}
|
{{- if .Values.statefulset.dind.rootless }}
|
||||||
- mountPath: /run/user/{{ .Values.statefulset.dind.uid | default 1000 }}/
|
- mountPath: /run/user/{{ .Values.statefulset.dind.uid | default 1000 }}/
|
||||||
@@ -155,7 +148,7 @@ spec:
|
|||||||
{{- toYaml .Values.statefulset.runner.extraEnvs | nindent 12 }}
|
{{- toYaml .Values.statefulset.runner.extraEnvs | nindent 12 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
resources:
|
resources:
|
||||||
{{- include "gitea.actions.runner.resources" . | nindent 12 }}
|
{{- toYaml .Values.statefulset.resources | nindent 12 }}
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- mountPath: /runner/config.yaml
|
- mountPath: /runner/config.yaml
|
||||||
name: runner-config
|
name: runner-config
|
||||||
|
|||||||
@@ -451,85 +451,3 @@ tests:
|
|||||||
- equal:
|
- equal:
|
||||||
path: spec.template.spec.initContainers[0].image
|
path: spec.template.spec.initContainers[0].image
|
||||||
value: test.io/busybox:1.37.0
|
value: test.io/busybox:1.37.0
|
||||||
|
|
||||||
#
|
|
||||||
## RESOURCES
|
|
||||||
#
|
|
||||||
|
|
||||||
- it: shared statefulset.resources applies to both runner and dind containers
|
|
||||||
template: templates/statefulset.yaml
|
|
||||||
set:
|
|
||||||
enabled: true
|
|
||||||
statefulset.resources:
|
|
||||||
requests:
|
|
||||||
memory: "512Mi"
|
|
||||||
cpu: "250m"
|
|
||||||
limits:
|
|
||||||
memory: "1Gi"
|
|
||||||
asserts:
|
|
||||||
- hasDocuments:
|
|
||||||
count: 1
|
|
||||||
- equal:
|
|
||||||
path: spec.template.spec.containers[0].resources
|
|
||||||
value:
|
|
||||||
requests:
|
|
||||||
memory: "512Mi"
|
|
||||||
cpu: "250m"
|
|
||||||
limits:
|
|
||||||
memory: "1Gi"
|
|
||||||
- equal:
|
|
||||||
path: spec.template.spec.initContainers[1].resources
|
|
||||||
value:
|
|
||||||
requests:
|
|
||||||
memory: "512Mi"
|
|
||||||
cpu: "250m"
|
|
||||||
limits:
|
|
||||||
memory: "1Gi"
|
|
||||||
|
|
||||||
- it: statefulset.runner.resources overrides shared resources for runner container only
|
|
||||||
template: templates/statefulset.yaml
|
|
||||||
set:
|
|
||||||
enabled: true
|
|
||||||
statefulset.resources:
|
|
||||||
requests:
|
|
||||||
memory: "512Mi"
|
|
||||||
statefulset.runner.resources:
|
|
||||||
requests:
|
|
||||||
memory: "256Mi"
|
|
||||||
asserts:
|
|
||||||
- hasDocuments:
|
|
||||||
count: 1
|
|
||||||
- equal:
|
|
||||||
path: spec.template.spec.containers[0].resources
|
|
||||||
value:
|
|
||||||
requests:
|
|
||||||
memory: "256Mi"
|
|
||||||
- equal:
|
|
||||||
path: spec.template.spec.initContainers[1].resources
|
|
||||||
value:
|
|
||||||
requests:
|
|
||||||
memory: "512Mi"
|
|
||||||
|
|
||||||
- it: statefulset.dind.resources overrides shared resources for dind container only
|
|
||||||
template: templates/statefulset.yaml
|
|
||||||
set:
|
|
||||||
enabled: true
|
|
||||||
statefulset.resources:
|
|
||||||
requests:
|
|
||||||
memory: "512Mi"
|
|
||||||
statefulset.dind.resources:
|
|
||||||
requests:
|
|
||||||
memory: "4Gi"
|
|
||||||
asserts:
|
|
||||||
- hasDocuments:
|
|
||||||
count: 1
|
|
||||||
- equal:
|
|
||||||
path: spec.template.spec.containers[0].resources
|
|
||||||
value:
|
|
||||||
requests:
|
|
||||||
memory: "512Mi"
|
|
||||||
- equal:
|
|
||||||
path: spec.template.spec.initContainers[1].resources
|
|
||||||
value:
|
|
||||||
requests:
|
|
||||||
memory: "4Gi"
|
|
||||||
|
|||||||
+7
-20
@@ -1,15 +1,12 @@
|
|||||||
# Configure Gitea Actions
|
# Configure Gitea Actions
|
||||||
## @section Gitea Actions
|
## @section Gitea Actions
|
||||||
## @descriptionStart
|
|
||||||
## For resource limit examples (runner vs DinD), see [docs/resources.md](./docs/resources.md).
|
|
||||||
## @descriptionEnd
|
|
||||||
#
|
#
|
||||||
## @param enabled Create a Gitea Runner StatefulSet.
|
## @param enabled Create a Gitea Runner StatefulSet.
|
||||||
## @param statefulset.replicas the amount of (replica) runner pods deployed
|
## @param statefulset.replicas the amount of (replica) runner pods deployed
|
||||||
## @param statefulset.timezone is the timezone that will be set in the runner image
|
## @param statefulset.timezone is the timezone that will be set in the runner image
|
||||||
## @param statefulset.annotations Gitea Runner annotations
|
## @param statefulset.annotations Gitea Runner annotations
|
||||||
## @param statefulset.labels Gitea Runner labels
|
## @param statefulset.labels Gitea Runner labels
|
||||||
## @param statefulset.resources Shared resource requests/limits for both containers. Overridden by statefulset.runner.resources and statefulset.dind.resources. See docs/resources.md.
|
## @param statefulset.resources Gitea Runner resources
|
||||||
## @param statefulset.nodeSelector NodeSelector for the statefulset
|
## @param statefulset.nodeSelector NodeSelector for the statefulset
|
||||||
## @param statefulset.tolerations Tolerations for the statefulset
|
## @param statefulset.tolerations Tolerations for the statefulset
|
||||||
## @param statefulset.affinity Affinity for the statefulset
|
## @param statefulset.affinity Affinity for the statefulset
|
||||||
@@ -28,7 +25,6 @@
|
|||||||
## @param statefulset.runner.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`
|
## @param statefulset.runner.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`
|
||||||
## @param statefulset.runner.pullPolicy The Gitea Runner pullPolicy
|
## @param statefulset.runner.pullPolicy The Gitea Runner pullPolicy
|
||||||
## @param statefulset.runner.fullOverride Completely overrides the image registry, path/image, tag and digest.
|
## @param statefulset.runner.fullOverride Completely overrides the image registry, path/image, tag and digest.
|
||||||
## @param statefulset.runner.resources Resource requests/limits for the runner container. Takes precedence over statefulset.resources when set.
|
|
||||||
## @param statefulset.runner.extraVolumeMounts Allows mounting extra volumes in the Gitea Runner container
|
## @param statefulset.runner.extraVolumeMounts Allows mounting extra volumes in the Gitea Runner container
|
||||||
## @param statefulset.runner.extraEnvs Allows adding custom environment variables
|
## @param statefulset.runner.extraEnvs Allows adding custom environment variables
|
||||||
## @param statefulset.runner.flushCache whether to clear the .runner (cache) file by creating an extra init container, can slightly increase boot-up time
|
## @param statefulset.runner.flushCache whether to clear the .runner (cache) file by creating an extra init container, can slightly increase boot-up time
|
||||||
@@ -42,7 +38,6 @@
|
|||||||
## @param statefulset.dind.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`
|
## @param statefulset.dind.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`
|
||||||
## @param statefulset.dind.fullOverride Completely overrides the image registry, path/image, tag and digest.
|
## @param statefulset.dind.fullOverride Completely overrides the image registry, path/image, tag and digest.
|
||||||
## @param statefulset.dind.pullPolicy The Docker-in-Docker pullPolicy
|
## @param statefulset.dind.pullPolicy The Docker-in-Docker pullPolicy
|
||||||
## @param statefulset.dind.resources Resource requests/limits for the DinD sidecar container. Takes precedence over statefulset.resources when set.
|
|
||||||
## @param statefulset.dind.extraVolumeMounts Allows mounting extra volumes in the Docker-in-Docker container
|
## @param statefulset.dind.extraVolumeMounts Allows mounting extra volumes in the Docker-in-Docker container
|
||||||
## @param statefulset.dind.extraEnvs Allows adding custom environment variables, such as `DOCKER_IPTABLES_LEGACY`
|
## @param statefulset.dind.extraEnvs Allows adding custom environment variables, such as `DOCKER_IPTABLES_LEGACY`
|
||||||
## @param statefulset.dind.extraArgs Allows adding custom arguments to the Docker Daemon
|
## @param statefulset.dind.extraArgs Allows adding custom arguments to the Docker Daemon
|
||||||
@@ -76,11 +71,10 @@ statefulset:
|
|||||||
runner:
|
runner:
|
||||||
registry: "docker.gitea.com"
|
registry: "docker.gitea.com"
|
||||||
repository: runner
|
repository: runner
|
||||||
tag: 3.0.2
|
tag: 1.0.6
|
||||||
digest: ""
|
digest: ""
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
fullOverride: ""
|
fullOverride: ""
|
||||||
resources: {}
|
|
||||||
extraVolumeMounts: []
|
extraVolumeMounts: []
|
||||||
extraEnvs:
|
extraEnvs:
|
||||||
[]
|
[]
|
||||||
@@ -106,11 +100,10 @@ statefulset:
|
|||||||
uid: ""
|
uid: ""
|
||||||
registry: "docker.io"
|
registry: "docker.io"
|
||||||
repository: docker
|
repository: docker
|
||||||
tag: 29.7.1-dind
|
tag: 29.5.2-dind
|
||||||
digest: ""
|
digest: ""
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
fullOverride: ""
|
fullOverride: ""
|
||||||
resources: {}
|
|
||||||
extraVolumeMounts: []
|
extraVolumeMounts: []
|
||||||
|
|
||||||
# If the container keeps crashing in your environment, you might have to add the `DOCKER_IPTABLES_LEGACY` environment variable.
|
# If the container keeps crashing in your environment, you might have to add the `DOCKER_IPTABLES_LEGACY` environment variable.
|
||||||
@@ -128,15 +121,12 @@ statefulset:
|
|||||||
|
|
||||||
## @section Gitea Actions Init
|
## @section Gitea Actions Init
|
||||||
#
|
#
|
||||||
## @param init.image.registry Image registry, e.g. gcr.io,docker.io
|
## @param init.image.registry image registry, e.g. gcr.io,docker.io
|
||||||
## @param init.image.repository The init image (default: busyboxy but can be changed to alpine e.g.)
|
## @param init.image.repository The init image
|
||||||
## @param init.image.tag The init image tag
|
## @param init.image.tag the init image tag
|
||||||
## @param init.image.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`
|
## @param init.image.digest Image digest. Allows to pin the given image tag. Useful for having control over mutable tags like `latest`
|
||||||
## @param init.image.pullPolicy The init image pullPolicy
|
## @param init.image.pullPolicy The init image pullPolicy
|
||||||
## @param init.image.fullOverride Completely overrides the image registry, path/image, tag and digest
|
## @param init.image.fullOverride Completely overrides the image registry, path/image, tag and digest.
|
||||||
#
|
|
||||||
## @param init.connectionCommandOverride Possiblity to change the command with which the container tests its connection to the Gitea server
|
|
||||||
## @param init.preConnectionCommandOverride Possibility to add commands that happen before the connection test loop
|
|
||||||
init:
|
init:
|
||||||
image:
|
image:
|
||||||
registry: ""
|
registry: ""
|
||||||
@@ -147,9 +137,6 @@ init:
|
|||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
fullOverride: ""
|
fullOverride: ""
|
||||||
|
|
||||||
connectionCommandOverride: ""
|
|
||||||
preConnectionCommandOverride: ""
|
|
||||||
|
|
||||||
## @section Runner Token Secret Configuration
|
## @section Runner Token Secret Configuration
|
||||||
#
|
#
|
||||||
## @param existingSecret Secret that contains the token
|
## @param existingSecret Secret that contains the token
|
||||||
|
|||||||
Reference in New Issue
Block a user