forgejo-runner helm release

forgejo-runner helm

No introduction found. Create it?

More popular helm chart found

forgejo-runner from bjw-s-labs/charts is more popular with 15 repositories.

Install

Install with:

helm repo add forgejo-runner oci://codeberg.org/wrenix/helm-charts/forgejo-runner
helm install forgejo-runner forgejo-runner/forgejo-runner -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (3 out of 14)

Name	Repo	Stars	Version	Timestamp
forgejo-runner	haraldkoch/kochhaus-home	176	5.0.1	9 hours ago
forgejo-runner	bjw-s-labs/home-ops	839	5.0.1	20 hours ago
forgejo-runner	rafaribe/home-ops	97	5.0.1	4 days ago

Name

Repo

Stars

Version

Timestamp

forgejo-runner

haraldkoch/kochhaus-home

176

5.0.1

9 hours ago

forgejo-runner

bjw-s-labs/home-ops

839

5.0.1

20 hours ago

forgejo-runner

rafaribe/home-ops

5.0.1

4 days ago

Values

See the most popular values for this chart:

Key	Types
controllers.forgejo-runner.annotations."reloader.stakater.com/auto" (13) `true`	string
controllers.forgejo-runner.pod.securityContext.fsGroup (11) `1000`	number
controllers.forgejo-runner.pod.securityContext.fsGroupChangePolicy (11) `OnRootMismatch`	string
controllers.forgejo-runner.pod.securityContext.runAsGroup (10) `1000`	number
controllers.forgejo-runner.pod.securityContext.runAsNonRoot (10) `true`	boolean
controllers.forgejo-runner.pod.securityContext.runAsUser (10) `1000`	number
controllers.forgejo-runner.pod.labels."app.kubernetes.io/component" (9) `forgejo-runner`	string
controllers.forgejo-runner.pod.automountServiceAccountToken (6) `true`	boolean
controllers.forgejo-runner.pod.terminationGracePeriodSeconds (4) `300`	number
controllers.forgejo-runner.pod.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1) `kubernetes.io/arch kubernetes.io/hostname`	string
controllers.forgejo-runner.pod.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1) `In In`	string
controllers.forgejo-runner.pod.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].values[] (1) `- amd64 - tpi-1`	string
controllers.forgejo-runner.replicas (11) `1`	number
controllers.forgejo-runner.type (11) `deployment`	string
controllers.forgejo-runner.containers.runner.command[] (10) `- sh - -ec - exec /bin/forgejo-runner daemon \ --config /config/runner.yaml \ --url "http://forgejo-http:3000" \ --uuid "$(cat /etc/forgejo-runner-secret/uuid)" \ --token-url file:///etc/forgejo-runner-secret/token`	string
controllers.forgejo-runner.containers.runner.image.repository (10) `registry.erwanleboucher.dev/erwanleboucher.dev/eleboucher/runner`	string
controllers.forgejo-runner.containers.runner.image.tag (10) `12.10.2@sha256:d5eeafda573012c229b730f5a18437b464d946473478e1f6bd56fd537b881609`	string
controllers.forgejo-runner.containers.runner.resources.requests.cpu (10) `5m`	string
controllers.forgejo-runner.containers.runner.resources.requests.memory (10) `32Mi`	string
controllers.forgejo-runner.containers.runner.resources.limits.memory (5) `512Mi`	string
controllers.forgejo-runner.containers.runner.securityContext.allowPrivilegeEscalation (10) `false`	boolean
controllers.forgejo-runner.containers.runner.securityContext.capabilities.drop[] (10) `- ALL`	string
controllers.forgejo-runner.containers.runner.securityContext.readOnlyRootFilesystem (10) `true`	boolean
controllers.forgejo-runner.containers.runner.env[].name (1) `RUNNER_UUID`	string
controllers.forgejo-runner.containers.runner.env[].valueFrom.secretKeyRef.key (1) `FORGEJO_RUNNER_UUID`	string
controllers.forgejo-runner.containers.runner.env[].valueFrom.secretKeyRef.name (1) `forgejo-runner-secret`	string
controllers.forgejo-runner.containers.k8s-plugin.args[] (6) `- --listen - unix:///plugin/forgejo-runner-k8s.sock`	string
controllers.forgejo-runner.containers.k8s-plugin.image.repository (6) `git.erwanleboucher.dev/eleboucher/runner-k8s-plugin`	string
controllers.forgejo-runner.containers.k8s-plugin.image.tag (6) `12.10.6@sha256:b0ffe279448c70fb3327485163da8da2ce12fa9cc39a29231edd676c9025c036`	string
controllers.forgejo-runner.containers.k8s-plugin.image.pullPolicy (2) `Always`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.requests.cpu (6) `5m`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.requests.memory (6) `32Mi`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.limits.memory (3) `128Mi`	string
controllers.forgejo-runner.containers.k8s-plugin.securityContext.allowPrivilegeEscalation (6) `false`	boolean
controllers.forgejo-runner.containers.k8s-plugin.securityContext.capabilities.drop[] (6) `- ALL`	string
controllers.forgejo-runner.containers.k8s-plugin.securityContext.readOnlyRootFilesystem (6) `true`	boolean
controllers.forgejo-runner.containers.app.command[] (3) `- sh - -c - while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner --config /data/config.yml daemon`	string
controllers.forgejo-runner.containers.app.env[].name (3) `DOCKER_HOST DOCKER_CERT_PATH DOCKER_TLS_VERIFY`	string
controllers.forgejo-runner.containers.app.env[].value (3) `tcp://localhost:2376 /certs/client 0`	string
controllers.forgejo-runner.containers.app.image.repository (3) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.containers.app.image.tag (3) `12.12.0@sha256:268ad0d1d24bd7ecf2386b7c44e8211398dc014ca81d4fd5fbad96fe79af18f5`	string
controllers.forgejo-runner.containers.app.securityContext.privileged (2) `true`	boolean
controllers.forgejo-runner.containers.app.resources.limits.cpu (1) `1000m`	string
controllers.forgejo-runner.containers.app.resources.limits.memory (1) `100Mi`	string
controllers.forgejo-runner.containers.app.resources.requests.cpu (1) `10m`	string
controllers.forgejo-runner.containers.app.resources.requests.memory (1) `100Mi`	string
controllers.forgejo-runner.containers.daemon.env[].name (3) `DOCKER_TLS_CERTDIR`	string
controllers.forgejo-runner.containers.daemon.env[].value (3) `/certs`	string
controllers.forgejo-runner.containers.daemon.image.repository (3) `docker`	string
controllers.forgejo-runner.containers.daemon.image.tag (3) `29.6.1-dind`	string
controllers.forgejo-runner.containers.daemon.securityContext.privileged (3) `true`	boolean
controllers.forgejo-runner.containers.daemon.resources.limits.cpu (1) `1000m`	string
controllers.forgejo-runner.containers.daemon.resources.limits.memory (1) `194Mi`	string
controllers.forgejo-runner.containers.daemon.resources.requests.cpu (1) `10m`	string
controllers.forgejo-runner.containers.daemon.resources.requests.memory (1) `194Mi`	string
controllers.forgejo-runner.initContainers.k8s-plugin.args[] (4) `- --listen - unix:///plugin/forgejo-runner-k8s.sock`	string
controllers.forgejo-runner.initContainers.k8s-plugin.image.repository (4) `registry.erwanleboucher.dev/erwanleboucher.dev/eleboucher/runner-k8s-plugin`	string
controllers.forgejo-runner.initContainers.k8s-plugin.image.tag (4) `12.10.6@sha256:b0ffe279448c70fb3327485163da8da2ce12fa9cc39a29231edd676c9025c036`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.limits.memory (4) `128Mi`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.cpu (4) `5m`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.memory (4) `32Mi`	string
controllers.forgejo-runner.initContainers.k8s-plugin.restartPolicy (4) `Always`	string
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.allowPrivilegeEscalation (4) `false`	boolean
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.capabilities.drop[] (4) `- ALL`	string
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.readOnlyRootFilesystem (4) `true`	boolean
controllers.forgejo-runner.initContainers.runner-register.args[] (2) - forgejo-runner register --no-interactive --token $(RUNNER_TOKEN) --name $(RUNNER_NAME) --instance $(FORGEJO_INSTANCE_URL) --labels self-hosted:host,docker:docker://ghcr.io/catthehacker/ubuntu:act-24.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-24.04,ubuntu-24.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04,renovate:docker://ghcr.io/catthehacker/ubuntu:act-24.04 ; forgejo-runner generate-config > /data/config.yml ; sed -i -e "s\|network: .*\|network: host\|" /data/config.yml ; sed -i -e "s\|^ envs:$\| envs:\n DOCKER_HOST: tcp://localhost:2376\n DOCKER_TLS_VERIFY: 1\n DOCKER_CERT_PATH: /certs/client\|" /data/config.yml ; sed -i -e "s\|^ options:\| options: -v /certs/client:/certs/client\|" /data/config.yml ; sed -i -e "s\| valid_volumes: \[\]$\| valid_volumes:\n - /certs/client\|" /data/config.yml ;	string
controllers.forgejo-runner.initContainers.runner-register.command[] (2) `- sh - -c`	string
controllers.forgejo-runner.initContainers.runner-register.env[].name (2) `RUNNER_NAME RUNNER_TOKEN FORGEJO_INSTANCE_URL`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.fieldRef.fieldPath (2) `metadata.name`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.key (2) `RUNNER_TOKEN FORGEJO_INSTANCE_URL`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.name (2) `forgejo-runner-secret forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.runner-register.image.repository (2) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.initContainers.runner-register.image.tag (2) `12.12.0@sha256:268ad0d1d24bd7ecf2386b7c44e8211398dc014ca81d4fd5fbad96fe79af18f5`	string
controllers.forgejo-runner.initContainers.register.command[] (1) `- sh - -c - if [ ! -f /data/.runner ]; then echo "Registering runner..."; forgejo-runner register --no-interactive \ --token $(RUNNER_TOKEN) \ --name $(RUNNER_NAME) \ --instance $(FORGEJO_INSTANCE_URL) \ --labels "$(LABELS)"; else echo "Runner already registered, skipping."; fi`	string
controllers.forgejo-runner.initContainers.register.env.FORGEJO_INSTANCE_URL (1) `https://forgejo.rnatr.com`	string
controllers.forgejo-runner.initContainers.register.env.LABELS (1) `ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest`	string
controllers.forgejo-runner.initContainers.register.envFrom[].secretRef.name (1) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.register.image.repository (1) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.initContainers.register.image.tag (1) `12.12.0@sha256:268ad0d1d24bd7ecf2386b7c44e8211398dc014ca81d4fd5fbad96fe79af18f5`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].accessMode (1) `ReadWriteOnce`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].path (1) `/data`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].name (1) `data`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].size (1) `1Gi`	string
persistence.config.globalMounts[].path (11) `/config`	string
persistence.config.globalMounts[].readOnly (1) `true`	boolean
persistence.config.globalMounts[].subPath (1) `config.yaml`	string
persistence.config.type (11) `configMap`	string
persistence.config.identifier (8) `config`	string
persistence.config.name (3) `forgejo-runner-config`	string
persistence.runner-secret.globalMounts[].path (10) `/etc/forgejo-runner-secret`	string
persistence.runner-secret.globalMounts[].readOnly (10) `true`	boolean
persistence.runner-secret.name (10) `forgejo-runner-secret`	string
persistence.runner-secret.type (10) `secret`	string
persistence.tmpfs.globalMounts[].path (10) `/data /tmp`	string
persistence.tmpfs.globalMounts[].subPath (10) `data tmp`	string
persistence.tmpfs.type (10) `emptyDir`	string
persistence.plugin.type (8) `emptyDir`	string
persistence.plugin.globalMounts[].path (7) `/plugin`	string
persistence.cache.globalMounts[].path (2) `/data/cache`	string
persistence.cache.globalMounts[].readOnly (1) `false false`	boolean
persistence.cache.globalMounts[].subPath (1) `cache cachelocal`	string
persistence.cache.type (2) `persistentVolumeClaim`	string
persistence.cache.accessMode (1) `ReadWriteOnce`	string
persistence.cache.size (1) `10Gi`	string
persistence.cache.storageClass (1) `ceph-block`	string
persistence.docker-certs.globalMounts[].path (2) `/certs`	string
persistence.docker-certs.type (2) `emptyDir`	string
persistence.plugins.globalMounts[].path (2) `/plugin`	string
persistence.plugins.type (2) `emptyDir`	string
persistence.runner-data.globalMounts[].path (2) `/data`	string
persistence.runner-data.type (2) `emptyDir`	string
persistence.certs.type (1) `emptyDir`	string
persistence.persistent.globalMounts[].path (1) `/persistent`	string
persistence.persistent.type (1) `emptyDir`	string
rbac.bindings.forgejo-runner.roleRef.identifier (10) `forgejo-runner`	string
rbac.bindings.forgejo-runner.subjects[].identifier (10) `forgejo-runner`	string
rbac.bindings.forgejo-runner.type (10) `RoleBinding`	string
rbac.roles.forgejo-runner.rules[].apiGroups[] (10) `- batch - - -`	string
rbac.roles.forgejo-runner.rules[].resources[] (10) `- jobs - pods - pods/exec - pods/log`	string
rbac.roles.forgejo-runner.rules[].verbs[] (10) `- create - get - list - watch - delete - list - watch - get - create - get - list - watch - get`	string
rbac.roles.forgejo-runner.type (10) `Role`	string
configMaps.config.data."podspec-default.yaml" (8) `containers: - env: - name: DEBIAN_FRONTEND value: noninteractive image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:a734c9ce7102d891f33cd9b64497255626df1a976179e73befe9851d5659cf6b imagePullPolicy: IfNotPresent name: main resources: limits: memory: 2Gi requests: cpu: 100m memory: 256Mi restartPolicy: Never`	string
configMaps.config.data."runner.yaml" (8) cache: enabled: true dir: /data/cache container: docker_host: "-" workdir_parent: shared/workdir host: workdir_parent: /data/act kubernetes: namespace: dev poll_timeout: 10m log: level: info plugins: k8s: address: unix:///plugin/forgejo-runner-k8s.sock options: namespace: dev poll_timeout: 10m labels: "app.kubernetes.io/name=forgejo-runner-instance,app.kubernetes.io/instance=env-${ENV_ID},egress.home.arpa/custom-egress=true" runner: capacity: 4 file: /persistent/.runner labels: - ubuntu-latest:k8s:/config/podspec-default.yaml - ubuntu-24.04:k8spod:/config/podspec-default.yaml - default:k8s:/config/podspec-default.yaml - docker:k8s:/config/podspec-dind.yaml timeout: 3h shutdown_timeout: 3m	string
configMaps.config.data."podspec-dind.yaml" (7) initContainers: - name: dind image: docker:29-dind securityContext: privileged: true restartPolicy: Always env: - name: DOCKER_TLS_CERTDIR value: /certs resources: requests: cpu: 100m memory: 256Mi limits: memory: 4Gi volumeMounts: - name: docker-storage mountPath: /var/lib/docker - name: docker-certs mountPath: /certs startupProbe: exec: command: - sh - -c - docker --tlsverify --tlscacert=/certs/client/ca.pem --tlscert=/certs/client/cert.pem --tlskey=/certs/client/key.pem -H tcp://localhost:2376 info initialDelaySeconds: 5 periodSeconds: 1 failureThreshold: 30 containers: - env: - name: DEBIAN_FRONTEND value: noninteractive - name: DOCKER_HOST value: tcp://localhost:2376 - name: DOCKER_TLS_VERIFY value: "1" - name: DOCKER_CERT_PATH value: /certs/client image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:a734c9ce7102d891f33cd9b64497255626df1a976179e73befe9851d5659cf6b imagePullPolicy: IfNotPresent name: main resources: limits: memory: 2Gi requests: cpu: 100m memory: 256Mi volumeMounts: - name: docker-certs mountPath: /certs readOnly: true volumes: - name: docker-storage emptyDir: {} - name: docker-certs emptyDir: {} restartPolicy: Never	string
configMaps.config.suffix (8) `config`	string
defaultPodOptions.automountServiceAccountToken (4) `true`	boolean
service.app.controller (3) `forgejo-runner`	string
service.app.ports.http.port (3) `45315`	number
dind.image.pullPolicy (1) `IfNotPresent`	string
dind.image.registry (1) `docker.io`	string
dind.image.repository (1) `library/docker`	string
dind.image.tag (1) `27-dind`	string
dind.resources.limits.cpu (1) `500m`	string
dind.resources.limits.memory (1) `1Gi`	string
dind.resources.requests.cpu (1) `50m`	string
dind.resources.requests.memory (1) `256Mi`	string
image.pullPolicy (1) `IfNotPresent`	string
knownLastVersion (1) `true`	boolean
nodeSelector."kubernetes.io/os" (1) `linux`	string
replicaCount (1) `1`	number
resources.limits.memory (1) `256Mi`	string
resources.requests.cpu (1) `50m`	string
resources.requests.memory (1) `128Mi`	string
runner.config.create (1) `false`	boolean
runner.config.existingSecret (1) `forgejo-runner-config`	string
runner.config.file.log.job_level (1) `info`	string
runner.config.file.log.level (1) `info`	string
runner.config.file.runner.capacity (1) `1`	number
runner.config.file.runner.file (1) `.runner`	string
runner.config.file.runner.insecure (1) `false`	boolean
runner.config.file.runner.timeout (1) `3h`	string
runner.config.instance (1) `https://forgejo.goyangi.io`	string
runner.config.name (1) `forgejo-runner`	string
securityContext.privileged (1) `true`	boolean

Key

Types

controllers.forgejo-runner.annotations."reloader.stakater.com/auto" (13)

true

string

controllers.forgejo-runner.pod.securityContext.fsGroup (11)

number

controllers.forgejo-runner.pod.securityContext.fsGroupChangePolicy (11)

OnRootMismatch

string

controllers.forgejo-runner.pod.securityContext.runAsGroup (10)

number

controllers.forgejo-runner.pod.securityContext.runAsNonRoot (10)

true

boolean

controllers.forgejo-runner.pod.securityContext.runAsUser (10)

number

controllers.forgejo-runner.pod.labels."app.kubernetes.io/component" (9)

forgejo-runner

string

controllers.forgejo-runner.pod.automountServiceAccountToken (6)

true

boolean

controllers.forgejo-runner.pod.terminationGracePeriodSeconds (4)

number

controllers.forgejo-runner.pod.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)

kubernetes.io/arch
kubernetes.io/hostname

string

controllers.forgejo-runner.pod.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)

In
In

string

controllers.forgejo-runner.pod.affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].values[] (1)

- amd64
- tpi-1

string

controllers.forgejo-runner.replicas (11)

number

controllers.forgejo-runner.type (11)

deployment

string

controllers.forgejo-runner.containers.runner.command[] (10)

- sh
- -ec
- exec /bin/forgejo-runner daemon \
  --config /config/runner.yaml \
  --url "http://forgejo-http:3000" \
  --uuid "$(cat /etc/forgejo-runner-secret/uuid)" \
  --token-url file:///etc/forgejo-runner-secret/token

string

controllers.forgejo-runner.containers.runner.image.repository (10)

registry.erwanleboucher.dev/erwanleboucher.dev/eleboucher/runner

string

controllers.forgejo-runner.containers.runner.image.tag (10)

12.10.2@sha256:d5eeafda573012c229b730f5a18437b464d946473478e1f6bd56fd537b881609

string

controllers.forgejo-runner.containers.runner.resources.requests.cpu (10)

5m

string

controllers.forgejo-runner.containers.runner.resources.requests.memory (10)

32Mi

string

controllers.forgejo-runner.containers.runner.resources.limits.memory (5)

512Mi

string

controllers.forgejo-runner.containers.runner.securityContext.allowPrivilegeEscalation (10)

false

boolean

controllers.forgejo-runner.containers.runner.securityContext.capabilities.drop[] (10)

- ALL

string

controllers.forgejo-runner.containers.runner.securityContext.readOnlyRootFilesystem (10)

true

boolean

controllers.forgejo-runner.containers.runner.env[].name (1)

RUNNER_UUID

string

controllers.forgejo-runner.containers.runner.env[].valueFrom.secretKeyRef.key (1)

FORGEJO_RUNNER_UUID

string

controllers.forgejo-runner.containers.runner.env[].valueFrom.secretKeyRef.name (1)

forgejo-runner-secret

string

controllers.forgejo-runner.containers.k8s-plugin.args[] (6)

- --listen
- unix:///plugin/forgejo-runner-k8s.sock

string

controllers.forgejo-runner.containers.k8s-plugin.image.repository (6)

git.erwanleboucher.dev/eleboucher/runner-k8s-plugin

string

controllers.forgejo-runner.containers.k8s-plugin.image.tag (6)

12.10.6@sha256:b0ffe279448c70fb3327485163da8da2ce12fa9cc39a29231edd676c9025c036

string

controllers.forgejo-runner.containers.k8s-plugin.image.pullPolicy (2)

Always

string

controllers.forgejo-runner.containers.k8s-plugin.resources.requests.cpu (6)

5m

string

controllers.forgejo-runner.containers.k8s-plugin.resources.requests.memory (6)

32Mi

string

controllers.forgejo-runner.containers.k8s-plugin.resources.limits.memory (3)

128Mi

string

controllers.forgejo-runner.containers.k8s-plugin.securityContext.allowPrivilegeEscalation (6)

false

boolean

controllers.forgejo-runner.containers.k8s-plugin.securityContext.capabilities.drop[] (6)

- ALL

string

controllers.forgejo-runner.containers.k8s-plugin.securityContext.readOnlyRootFilesystem (6)

true

boolean

controllers.forgejo-runner.containers.app.command[] (3)

- sh
- -c
- while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner --config /data/config.yml daemon

string

controllers.forgejo-runner.containers.app.env[].name (3)

DOCKER_HOST
DOCKER_CERT_PATH
DOCKER_TLS_VERIFY

string

controllers.forgejo-runner.containers.app.env[].value (3)

tcp://localhost:2376
/certs/client
0

string

controllers.forgejo-runner.containers.app.image.repository (3)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.containers.app.image.tag (3)

12.12.0@sha256:268ad0d1d24bd7ecf2386b7c44e8211398dc014ca81d4fd5fbad96fe79af18f5

string

controllers.forgejo-runner.containers.app.securityContext.privileged (2)

true

boolean

controllers.forgejo-runner.containers.app.resources.limits.cpu (1)

1000m

string

controllers.forgejo-runner.containers.app.resources.limits.memory (1)

100Mi

string

controllers.forgejo-runner.containers.app.resources.requests.cpu (1)

10m

string

controllers.forgejo-runner.containers.app.resources.requests.memory (1)

100Mi

string

controllers.forgejo-runner.containers.daemon.env[].name (3)

DOCKER_TLS_CERTDIR

string

controllers.forgejo-runner.containers.daemon.env[].value (3)

/certs

string

controllers.forgejo-runner.containers.daemon.image.repository (3)

docker

string

controllers.forgejo-runner.containers.daemon.image.tag (3)

29.6.1-dind

string

controllers.forgejo-runner.containers.daemon.securityContext.privileged (3)

true

boolean

controllers.forgejo-runner.containers.daemon.resources.limits.cpu (1)

1000m

string

controllers.forgejo-runner.containers.daemon.resources.limits.memory (1)

194Mi

string

controllers.forgejo-runner.containers.daemon.resources.requests.cpu (1)

10m

string

controllers.forgejo-runner.containers.daemon.resources.requests.memory (1)

194Mi

string

controllers.forgejo-runner.initContainers.k8s-plugin.args[] (4)

- --listen
- unix:///plugin/forgejo-runner-k8s.sock

string

controllers.forgejo-runner.initContainers.k8s-plugin.image.repository (4)

registry.erwanleboucher.dev/erwanleboucher.dev/eleboucher/runner-k8s-plugin

string

controllers.forgejo-runner.initContainers.k8s-plugin.image.tag (4)

12.10.6@sha256:b0ffe279448c70fb3327485163da8da2ce12fa9cc39a29231edd676c9025c036

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.limits.memory (4)

128Mi

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.cpu (4)

5m

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.memory (4)

32Mi

string

controllers.forgejo-runner.initContainers.k8s-plugin.restartPolicy (4)

Always

string

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.allowPrivilegeEscalation (4)

false

boolean

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.capabilities.drop[] (4)

- ALL

string

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.readOnlyRootFilesystem (4)

true

boolean

controllers.forgejo-runner.initContainers.runner-register.args[] (2)

- forgejo-runner register --no-interactive --token $(RUNNER_TOKEN) --name $(RUNNER_NAME) --instance $(FORGEJO_INSTANCE_URL) --labels self-hosted:host,docker:docker://ghcr.io/catthehacker/ubuntu:act-24.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-24.04,ubuntu-24.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04,renovate:docker://ghcr.io/catthehacker/ubuntu:act-24.04 ;
forgejo-runner generate-config > /data/config.yml ;
sed -i -e "s|network: .*|network: host|" /data/config.yml ;
sed -i -e "s|^  envs:$|  envs:\n    DOCKER_HOST: tcp://localhost:2376\n    DOCKER_TLS_VERIFY: 1\n    DOCKER_CERT_PATH: /certs/client|" /data/config.yml ;
sed -i -e "s|^  options:|  options: -v /certs/client:/certs/client|" /data/config.yml ;
sed -i -e "s|  valid_volumes: \[\]$|  valid_volumes:\n    - /certs/client|" /data/config.yml ;

string

controllers.forgejo-runner.initContainers.runner-register.command[] (2)

- sh
- -c

string

controllers.forgejo-runner.initContainers.runner-register.env[].name (2)

RUNNER_NAME
RUNNER_TOKEN
FORGEJO_INSTANCE_URL

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.fieldRef.fieldPath (2)

metadata.name

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.key (2)

RUNNER_TOKEN
FORGEJO_INSTANCE_URL

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.name (2)

forgejo-runner-secret
forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.runner-register.image.repository (2)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.initContainers.runner-register.image.tag (2)

12.12.0@sha256:268ad0d1d24bd7ecf2386b7c44e8211398dc014ca81d4fd5fbad96fe79af18f5

string

controllers.forgejo-runner.initContainers.register.command[] (1)

- sh
- -c
- if [ ! -f /data/.runner ]; then
  echo "Registering runner...";
  forgejo-runner register --no-interactive \
    --token $(RUNNER_TOKEN) \
    --name $(RUNNER_NAME) \
    --instance $(FORGEJO_INSTANCE_URL) \
    --labels "$(LABELS)";
else
  echo "Runner already registered, skipping.";
fi

string

controllers.forgejo-runner.initContainers.register.env.FORGEJO_INSTANCE_URL (1)

https://forgejo.rnatr.com

string

controllers.forgejo-runner.initContainers.register.env.LABELS (1)

ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest

string

controllers.forgejo-runner.initContainers.register.envFrom[].secretRef.name (1)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.register.image.repository (1)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.initContainers.register.image.tag (1)

12.12.0@sha256:268ad0d1d24bd7ecf2386b7c44e8211398dc014ca81d4fd5fbad96fe79af18f5

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].accessMode (1)

ReadWriteOnce

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].path (1)

/data

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].name (1)

data

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].size (1)

1Gi

string

persistence.config.globalMounts[].path (11)

/config

string

persistence.config.globalMounts[].readOnly (1)

true

boolean

persistence.config.globalMounts[].subPath (1)

config.yaml

string

persistence.config.type (11)

configMap

string

persistence.config.identifier (8)

config

string

persistence.config.name (3)

forgejo-runner-config

string

persistence.runner-secret.globalMounts[].path (10)

/etc/forgejo-runner-secret

string

persistence.runner-secret.globalMounts[].readOnly (10)

true

boolean

persistence.runner-secret.name (10)

forgejo-runner-secret

string

persistence.runner-secret.type (10)

secret

string

persistence.tmpfs.globalMounts[].path (10)

/data
/tmp

string

persistence.tmpfs.globalMounts[].subPath (10)

data
tmp

string

persistence.tmpfs.type (10)

emptyDir

string

persistence.plugin.type (8)

emptyDir

string

persistence.plugin.globalMounts[].path (7)

/plugin

string

persistence.cache.globalMounts[].path (2)

/data/cache

string

persistence.cache.globalMounts[].readOnly (1)

false
false

boolean

persistence.cache.globalMounts[].subPath (1)

cache
cachelocal

string

persistence.cache.type (2)

persistentVolumeClaim

string

persistence.cache.accessMode (1)

ReadWriteOnce

string

persistence.cache.size (1)

10Gi

string

persistence.cache.storageClass (1)

ceph-block

string

persistence.docker-certs.globalMounts[].path (2)

/certs

string

persistence.docker-certs.type (2)

emptyDir

string

persistence.plugins.globalMounts[].path (2)

/plugin

string

persistence.plugins.type (2)

emptyDir

string

persistence.runner-data.globalMounts[].path (2)

/data

string

persistence.runner-data.type (2)

emptyDir

string

persistence.certs.type (1)

emptyDir

string

persistence.persistent.globalMounts[].path (1)

/persistent

string

persistence.persistent.type (1)

emptyDir

string

rbac.bindings.forgejo-runner.roleRef.identifier (10)

forgejo-runner

string

rbac.bindings.forgejo-runner.subjects[].identifier (10)

forgejo-runner

string

rbac.bindings.forgejo-runner.type (10)

RoleBinding

string

rbac.roles.forgejo-runner.rules[].apiGroups[] (10)

- batch
- 
- 
-

string

rbac.roles.forgejo-runner.rules[].resources[] (10)

- jobs
- pods
- pods/exec
- pods/log

string

rbac.roles.forgejo-runner.rules[].verbs[] (10)

- create
- get
- list
- watch
- delete
- list
- watch
- get
- create
- get
- list
- watch
- get

string

rbac.roles.forgejo-runner.type (10)

Role

string

configMaps.config.data."podspec-default.yaml" (8)

containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:a734c9ce7102d891f33cd9b64497255626df1a976179e73befe9851d5659cf6b
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        memory: 2Gi
      requests:
        cpu: 100m
        memory: 256Mi
restartPolicy: Never

string

configMaps.config.data."runner.yaml" (8)

cache:
  enabled: true
  dir: /data/cache
container:
  docker_host: "-"
  workdir_parent: shared/workdir
host:
  workdir_parent: /data/act
kubernetes:
  namespace: dev
  poll_timeout: 10m
log:
  level: info
plugins:
  k8s:
    address: unix:///plugin/forgejo-runner-k8s.sock
    options:
      namespace: dev
      poll_timeout: 10m
      labels: "app.kubernetes.io/name=forgejo-runner-instance,app.kubernetes.io/instance=env-${ENV_ID},egress.home.arpa/custom-egress=true"
runner:
  capacity: 4
  file: /persistent/.runner
  labels:
    - ubuntu-latest:k8s:/config/podspec-default.yaml
    - ubuntu-24.04:k8spod:/config/podspec-default.yaml
    - default:k8s:/config/podspec-default.yaml
    - docker:k8s:/config/podspec-dind.yaml
  timeout: 3h
  shutdown_timeout: 3m

string

configMaps.config.data."podspec-dind.yaml" (7)

initContainers:
  - name: dind
    image: docker:29-dind
    securityContext:
      privileged: true
    restartPolicy: Always
    env:
      - name: DOCKER_TLS_CERTDIR
        value: /certs
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        memory: 4Gi
    volumeMounts:
      - name: docker-storage
        mountPath: /var/lib/docker
      - name: docker-certs
        mountPath: /certs
    startupProbe:
      exec:
        command:
          - sh
          - -c
          - docker --tlsverify --tlscacert=/certs/client/ca.pem --tlscert=/certs/client/cert.pem --tlskey=/certs/client/key.pem -H tcp://localhost:2376 info
      initialDelaySeconds: 5
      periodSeconds: 1
      failureThreshold: 30
containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
      - name: DOCKER_HOST
        value: tcp://localhost:2376
      - name: DOCKER_TLS_VERIFY
        value: "1"
      - name: DOCKER_CERT_PATH
        value: /certs/client
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:a734c9ce7102d891f33cd9b64497255626df1a976179e73befe9851d5659cf6b
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        memory: 2Gi
      requests:
        cpu: 100m
        memory: 256Mi
    volumeMounts:
      - name: docker-certs
        mountPath: /certs
        readOnly: true
volumes:
  - name: docker-storage
    emptyDir: {}
  - name: docker-certs
    emptyDir: {}
restartPolicy: Never

string

configMaps.config.suffix (8)