gitlab-runner helm release

Key	Types
gitlabUrl (10) `https://gitlab.com/`	string
rbac.create (10) `true`	boolean
rbac.clusterWideAccess (3) `false`	boolean
rbac.rules[].apiGroups[] (3) `-`	string
rbac.rules[].resources[] (3) `- *`	string
rbac.rules[].verbs[] (3) `- *`	string
rbac.imagePullSecrets[] (1) `- gitlab-registry-auth`	string
unregisterRunners (8) `true`	boolean
concurrent (6) `2`	number
replicas (6) `2`	number
runners.config (6) [[runners]] [runners.kubernetes] namespace = "{{.Release.Namespace}}" privileged = true [[runners.kubernetes.volumes.host_path]] name = "devices" host_path = "/dev" mount_path = "/dev" read_only = true [[runners.kubernetes.pod_spec]] name = "ephemeral-builds" patch_type = "strategic" patch = ''' containers: - name: build volumeMounts: - name: builds mountPath: /builds - name: helper volumeMounts: - name: builds mountPath: /builds volumes: - name: builds ephemeral: volumeClaimTemplate: spec: accessModes: [ ReadWriteOnce ] resources: requests: storage: 32Gi ''' [runners.feature_flags] FF_USE_ADVANCED_POD_SPEC_CONFIGURATION = true	string
runners.secret (5) `gitlab-runner`	string
runners.cache.secretName (3) `gitlab-runner-s3access-secret`	string
runners.executor (3) `kubernetes`	string
runners.name (3) `K3s`	string
runners.tags (3) `kubernetes,internal`	string
runners.cache_dir (2) `cache`	string
runners.env.DOCKER_HOST (2) `tcp://docker:2375`	string
runners.env.DOCKER_TLS_CERTDIR (2)	string
runners.imagePullPolicy (2) `if-not-present`	string
runners.namespace (2) `default`	string
runners.privileged (2) `true`	boolean
runners.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1) `node-role.kubernetes.io/control-plane`	string
runners.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1) `DoesNotExist`	string
runners.runUntagged (1) `true`	boolean
logLevel (5) `info`	string
metrics.enabled (5) `true`	boolean
metrics.serviceMonitor.enabled (5) `true`	boolean
metrics.serviceMonitor.interval (1) `1h`	string
metrics.serviceMonitor.path (1) `/metrics`	string
metrics.serviceMonitor.scheme (1) `http`	string
metrics.port (1) `9252`	number
metrics.portName (1) `metrics`	string
service.enabled (5) `true`	boolean
service.type (1) `ClusterIP`	string
checkInterval (3) `10`	number
env.TZ (3) `${TIMEZONE}`	string
imagePullPolicy (3) `IfNotPresent`	string
imagePullSecrets[].name (3) `regcred`	string
logFormat (3) `json`	string
extraEnvFrom.CACHE_S3_ACCESS_KEY.secretKeyRef.key (2) `accesskey`	string
extraEnvFrom.CACHE_S3_ACCESS_KEY.secretKeyRef.name (2) `gitlab-runner-s3access-secret`	string
extraEnvFrom.CACHE_S3_SECRET_KEY.secretKeyRef.key (2) `secretkey`	string
extraEnvFrom.CACHE_S3_SECRET_KEY.secretKeyRef.name (2) `gitlab-runner-s3access-secret`	string
nameOverride (2) `gitlab-runner`	string
podAnnotations."reloader.stakater.com/search" (2) `true`	string
podAnnotations."reloader.stakater.com/auto" (1) `true`	string
podAnnotations."secret.reloader.stakater.com/reload" (1) `runner-secret, runner-cache-secret`	string
revisionHistoryLimit (2) `1`	number
runnerRegistrationToken (2) `${SECRET_GITLAB_RUNNER_TOKEN}`	string
affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1) `k8s.pascaliske.dev/location`	string
affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1) `In`	string
affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].values[] (1) `- public`	string
defaultPodOptions.annotations."instrumentation.opentelemetry.io/inject-go" (1) `true-sidecar-gitlab`	string
defaultPodOptions.annotations."instrumentation.opentelemetry.io/otel-go-auto-target-exe" (1) `/usr/bin/gitlab-runner`	string
defaultPodOptions.annotations."sidecar.opentelemetry.io/inject" (1) `monitoring/opentelemetry-sidecar`	string
extraEnv.CACHE_S3_BUCKET_LOCATION (1) `us-east-1`	string
extraEnv.CACHE_S3_BUCKET_NAME (1) `gitlab-runner`	string
extraEnv.CACHE_S3_SERVER_ADDRESS (1) `s3.${DOMAIN_NAME}`	string
extraEnv.CACHE_SHARED (1) `true`	boolean
fullnameOverride (1) `gitlab-runner`	string
image (1) `gitlab/gitlab-runner:alpine-v14.0.1`	string
podSecurityPolicy.enabled (1) `false`	boolean
podSecurityPolicy.resourceNames[] (1) `- gitlab-runner`	string
resources.requests.cpu (1) `1000m`	string
resources.requests.memory (1) `512M`	string
runnerToken (1) `${GITLAB_RUNNER_TOKEN}`	string
securityContext.fsGroup (1) `999`	number
securityContext.runAsUser (1) `999`	number
sentryDsn (1) `${SENTRY_DSN_LEGACY}`	string
terminationGracePeriodSeconds (1) `3600`	number
tolerations[].effect (1) `NoSchedule`	string
tolerations[].key (1) `k8s.pascaliske.dev/location`	string
tolerations[].operator (1) `Equal`	string
tolerations[].value (1) `public`	string
volumeMounts[].mountPath (1) `/.gitlab-runner`	string
volumeMounts[].name (1) `root-gitlab-runner`	string
volumes[].emptyDir.medium (1) `Memory`	string
volumes[].name (1) `root-gitlab-runner`	string

Key

Types

gitlabUrl (10)

https://gitlab.com/

string

rbac.create (10)

true

boolean

rbac.clusterWideAccess (3)

false

boolean

rbac.rules[].apiGroups[] (3)

string

rbac.rules[].resources[] (3)

- *

string

rbac.rules[].verbs[] (3)

- *

string

rbac.imagePullSecrets[] (1)

- gitlab-registry-auth

string

unregisterRunners (8)

true

boolean

concurrent (6)

number

replicas (6)

number

runners.config (6)

[[runners]]
  [runners.kubernetes]
    namespace = "{{.Release.Namespace}}"
    privileged = true

    [[runners.kubernetes.volumes.host_path]]
      name = "devices"
      host_path = "/dev"
      mount_path = "/dev"
      read_only = true

    [[runners.kubernetes.pod_spec]]
      name = "ephemeral-builds"
      patch_type = "strategic"
      patch = '''
        containers:
        - name: build
          volumeMounts:
          - name: builds
            mountPath: /builds
        - name: helper
          volumeMounts:
          - name: builds
            mountPath: /builds
        volumes:
        - name: builds
          ephemeral:
            volumeClaimTemplate:
              spec:
                accessModes: [ ReadWriteOnce ]
                resources:
                  requests:
                    storage: 32Gi
      '''
  [runners.feature_flags]
    FF_USE_ADVANCED_POD_SPEC_CONFIGURATION = true

string

runners.secret (5)