forgejo-runner helm release

No introduction found. Create it?

Name	Repo	Stars	Version	Timestamp
forgejo-runner	m00nwtchr/homelab-cluster	37	4.6.2	2 months ago
forgejo-runner	ahinko/home-ops	291	5.0.0	2 months ago
forgejo-runner	drag0n141/home-ops	58	5.0.1	2 months ago

Name

Repo

Stars

Version

Timestamp

forgejo-runner

m00nwtchr/homelab-cluster

4.6.2

2 months ago

forgejo-runner

ahinko/home-ops

291

5.0.0

2 months ago

forgejo-runner

drag0n141/home-ops

5.0.1

2 months ago

Key	Types
controllers.forgejo-runner.annotations."reloader.stakater.com/auto" (12) `true`	string
controllers.forgejo-runner.replicas (11) `1`	number
controllers.forgejo-runner.type (10) `statefulset`	string
controllers.forgejo-runner.pod.securityContext.fsGroup (8) `1000`	number
controllers.forgejo-runner.pod.securityContext.fsGroupChangePolicy (8) `OnRootMismatch`	string
controllers.forgejo-runner.pod.securityContext.runAsGroup (7) `1000`	number
controllers.forgejo-runner.pod.securityContext.runAsNonRoot (7) `true`	boolean
controllers.forgejo-runner.pod.securityContext.runAsUser (7) `1000`	number
controllers.forgejo-runner.pod.securityContext.seccompProfile.type (1) `RuntimeDefault`	string
controllers.forgejo-runner.pod.labels."app.kubernetes.io/component" (7) `forgejo-runner`	string
controllers.forgejo-runner.pod.automountServiceAccountToken (5) `true`	boolean
controllers.forgejo-runner.pod.terminationGracePeriodSeconds (2) `300`	number
controllers.forgejo-runner.pod.annotations."reloader.stakater.com/auto" (1) `true`	string
controllers.forgejo-runner.containers.runner.command[] (7) `- sh - -ec - exec /bin/forgejo-runner daemon \ --config /config/runner.yaml \ --url "http://forgejo-http:3000" \ --uuid "$(cat /etc/forgejo-runner-secret/uuid)" \ --token-url file:///etc/forgejo-runner-secret/token`	string
controllers.forgejo-runner.containers.runner.image.repository (7) `git.erwanleboucher.dev/eleboucher/runner`	string
controllers.forgejo-runner.containers.runner.image.tag (7) `12.10.2@sha256:d5eeafda573012c229b730f5a18437b464d946473478e1f6bd56fd537b881609`	string
controllers.forgejo-runner.containers.runner.resources.requests.cpu (7) `5m`	string
controllers.forgejo-runner.containers.runner.resources.requests.memory (7) `32Mi`	string
controllers.forgejo-runner.containers.runner.resources.limits.memory (2) `512Mi`	string
controllers.forgejo-runner.containers.runner.securityContext.allowPrivilegeEscalation (7) `false`	boolean
controllers.forgejo-runner.containers.runner.securityContext.capabilities.drop[] (7) `- ALL`	string
controllers.forgejo-runner.containers.runner.securityContext.readOnlyRootFilesystem (7) `true`	boolean
controllers.forgejo-runner.containers.app.command[] (6) `- sh - -c - while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner --config /config/config.yaml daemon`	string
controllers.forgejo-runner.containers.app.env[].name (6) `DOCKER_HOST DOCKER_CERT_PATH DOCKER_TLS_VERIFY`	string
controllers.forgejo-runner.containers.app.env[].value (6) `tcp://localhost:2376 /certs/client 1`	string
controllers.forgejo-runner.containers.app.image.repository (6) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.containers.app.image.tag (6) `12.10.2`	string
controllers.forgejo-runner.containers.app.securityContext.privileged (3) `true`	boolean
controllers.forgejo-runner.containers.app.resources.limits.memory (2) `100Mi`	string
controllers.forgejo-runner.containers.app.resources.requests.cpu (2) `10m`	string
controllers.forgejo-runner.containers.app.resources.requests.memory (2) `100Mi`	string
controllers.forgejo-runner.containers.daemon.env[].name (6) `DOCKER_TLS_CERTDIR`	string
controllers.forgejo-runner.containers.daemon.env[].value (6) `/certs`	string
controllers.forgejo-runner.containers.daemon.image.repository (6) `docker`	string
controllers.forgejo-runner.containers.daemon.image.tag (6) `29.5.3-dind`	string
controllers.forgejo-runner.containers.daemon.securityContext.privileged (6) `true`	boolean
controllers.forgejo-runner.containers.daemon.resources.limits.memory (2) `194Mi`	string
controllers.forgejo-runner.containers.daemon.resources.requests.cpu (2) `10m`	string
controllers.forgejo-runner.containers.daemon.resources.requests.memory (2) `194Mi`	string
controllers.forgejo-runner.containers.k8s-plugin.args[] (3) `- --listen - unix:///plugin/forgejo-runner-k8s.sock`	string
controllers.forgejo-runner.containers.k8s-plugin.image.repository (3) `git.erwanleboucher.dev/eleboucher/runner-k8s-plugin`	string
controllers.forgejo-runner.containers.k8s-plugin.image.tag (3) `12.10.6@sha256:b0ffe279448c70fb3327485163da8da2ce12fa9cc39a29231edd676c9025c036`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.requests.cpu (3) `5m`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.requests.memory (3) `32Mi`	string
controllers.forgejo-runner.containers.k8s-plugin.securityContext.allowPrivilegeEscalation (3) `false`	boolean
controllers.forgejo-runner.containers.k8s-plugin.securityContext.capabilities.drop[] (3) `- ALL`	string
controllers.forgejo-runner.containers.k8s-plugin.securityContext.readOnlyRootFilesystem (3) `true`	boolean
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].accessMode (5) `ReadWriteOnce`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].path (5) `/persistent`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].subPath (1) `cache docker`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].name (5) `persistent`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].size (5) `1Gi`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].storageClass (1) `openebs-hostpath`	string
controllers.forgejo-runner.statefulset.podManagementPolicy (1) `Parallel`	string
controllers.forgejo-runner.initContainers.runner-register.command[] (4) `- sh - -c`	string
controllers.forgejo-runner.initContainers.runner-register.env[].name (4) `RUNNER_NAME RUNNER_TOKEN FORGEJO_INSTANCE_URL`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.key (4) `RUNNER_TOKEN`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.name (4) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.fieldRef.fieldPath (3) `metadata.name`	string
controllers.forgejo-runner.initContainers.runner-register.env[].value (2) `http://forgejo-http.code.svc.cluster.local:3000`	string
controllers.forgejo-runner.initContainers.runner-register.image.repository (4) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.initContainers.runner-register.image.tag (4) `12.10.2`	string
controllers.forgejo-runner.initContainers.runner-register.args[] (3) - forgejo-runner register --no-interactive --token $(RUNNER_TOKEN) --name $(RUNNER_NAME) --instance $(FORGEJO_INSTANCE_URL) --labels self-hosted:host,docker:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04,renovate:docker://ghcr.io/catthehacker/ubuntu:act-22.04 ; forgejo-runner generate-config > /data/config.yml ; sed -i -e "s\|network: .*\|network: host\|" /data/config.yml ; sed -i -e "s\|^ envs:$\| envs:\n DOCKER_HOST: tcp://localhost:2376\n DOCKER_TLS_VERIFY: 1\n DOCKER_CERT_PATH: /certs/client\|" /data/config.yml ; sed -i -e "s\|^ options:\| options: -v /certs/client:/certs/client\|" /data/config.yml ; sed -i -e "s\| valid_volumes: \[\]$\| valid_volumes:\n - /certs/client\|" /data/config.yml ;	string
controllers.forgejo-runner.initContainers.k8s-plugin.args[] (2) `- --listen - unix:///plugin/forgejo-runner-k8s.sock`	string
controllers.forgejo-runner.initContainers.k8s-plugin.image.repository (2) `registry.erwanleboucher.dev/erwanleboucher.dev/eleboucher/runner-k8s-plugin`	string
controllers.forgejo-runner.initContainers.k8s-plugin.image.tag (2) `12.10.6@sha256:b0ffe279448c70fb3327485163da8da2ce12fa9cc39a29231edd676c9025c036`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.limits.memory (2) `128Mi`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.cpu (2) `5m`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.memory (2) `32Mi`	string
controllers.forgejo-runner.initContainers.k8s-plugin.restartPolicy (2) `Always`	string
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.allowPrivilegeEscalation (2) `false`	boolean
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.capabilities.drop[] (2) `- ALL`	string
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.readOnlyRootFilesystem (2) `true`	boolean
controllers.forgejo-runner.initContainers.register-runner.command[] (2) `- sh - -c - if [ -f /persistent/.runner ]; then echo "Runner already registered, skipping" exit 0 fi echo "Registering runner..." cd /persistent && forgejo-runner register \ --instance http://forgejo-http.development.svc.cluster.local:3000 \ --token "${FORGEJO_RUNNER_TOKEN}" \ --name k8s-runner \ --labels "default:k8spod:/config/podspec-default.yaml" \ --no-interactive`	string
controllers.forgejo-runner.initContainers.register-runner.image.repository (2) `git.erwanleboucher.dev/eleboucher/runner`	string
controllers.forgejo-runner.initContainers.register-runner.image.tag (2) `latest@sha256:ac15b5ac34ec2021f33a37d4b104eb138951444eeda903be4315178d9f068ea1`	string
controllers.forgejo-runner.initContainers.register-runner.env[].name (1) `RUNNER_TOKEN`	string
controllers.forgejo-runner.initContainers.register-runner.env[].valueFrom.secretKeyRef.key (1) `RUNNER_TOKEN`	string
controllers.forgejo-runner.initContainers.register-runner.env[].valueFrom.secretKeyRef.name (1) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.register-runner.envFrom[].secretRef.name (1) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.register.command[] (2) `- sh - -c - if [ ! -f /data/.runner ]; then echo "Registering runner..."; forgejo-runner register --no-interactive \ --token $(RUNNER_TOKEN) \ --name $(RUNNER_NAME) \ --instance $(FORGEJO_INSTANCE_URL) \ --labels "$(LABELS)"; else echo "Runner already registered, skipping."; fi`	string
controllers.forgejo-runner.initContainers.register.env.FORGEJO_INSTANCE_URL (2) `https://git.m00nlit.dev`	string
controllers.forgejo-runner.initContainers.register.env.LABELS (2) `ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest`	string
controllers.forgejo-runner.initContainers.register.envFrom[].secretRef.name (2) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.register.image.repository (2) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.initContainers.register.image.tag (2) `12.10.1@sha256:3d49075f9115054ae2485d8cea2819296a904dfd4f00017285168028615d8533`	string
controllers.forgejo-runner.podDisruptionBudget.minAvailable (1) `1`	number
controllers.main.containers.daemon.env[].name (2) `DOCKER_TLS_CERTDIR`	string
controllers.main.containers.daemon.env[].value (2) `/certs`	string
controllers.main.containers.daemon.image.repository (2) `mirror.gcr.io/docker`	string
controllers.main.containers.daemon.image.tag (2) `29.5.3-dind`	string
controllers.main.containers.daemon.resources.limits.ephemeral-storage (2) `500Mi`	string
controllers.main.containers.daemon.resources.limits.memory (2) `200Mi`	string
controllers.main.containers.daemon.resources.requests.cpu (2) `10m`	string
controllers.main.containers.daemon.resources.requests.ephemeral-storage (2) `200Mi`	string
controllers.main.containers.daemon.resources.requests.memory (2) `20Mi`	string
controllers.main.containers.daemon.securityContext.privileged (2) `true`	boolean
controllers.main.containers.main.command[] (2) `- sh - -c - while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner daemon --config /config/config.yaml`	string
controllers.main.containers.main.env[].name (2) `DOCKER_HOST DOCKER_CERT_PATH DOCKER_TLS_VERIFY`	string
controllers.main.containers.main.env[].value (2) `tcp://localhost:2376 /certs/client 1`	string
controllers.main.containers.main.image.pullPolicy (2) `IfNotPresent`	string
controllers.main.containers.main.image.repository (2) `code.forgejo.org/forgejo/runner`	string
controllers.main.containers.main.image.tag (2) `12.10.2`	string
controllers.main.containers.main.resources.limits.ephemeral-storage (2) `500Mi`	string
controllers.main.containers.main.resources.limits.memory (2) `500Mi`	string
controllers.main.containers.main.resources.requests.cpu (2) `10m`	string
controllers.main.containers.main.resources.requests.ephemeral-storage (2) `200Mi`	string
controllers.main.containers.main.resources.requests.memory (2) `100Mi`	string
controllers.main.containers.main.securityContext.fsGroup (2) `1000`	number
controllers.main.containers.main.securityContext.fsGroupChangePolicy (2) `OnRootMismatch`	string
controllers.main.containers.main.securityContext.runAsGroup (2) `1000`	number
controllers.main.containers.main.securityContext.runAsUser (2) `1000`	number
controllers.main.initContainers.register.command[] (2) `- sh - -c - if [ ! -f /data/.runner ]; then echo "Registering runner..."; forgejo-runner register --no-interactive \ --token ${RUNNER_TOKEN} --name ${RUNNER_NAME} --instance ${FORGEJO_INSTANCE_URL} -- labels "${LABELS}"; else echo "Runner already registered, skipping."; fi`	string
controllers.main.initContainers.register.env[].name (2) `RUNNER_NAME RUNNER_SECRET FORGEJO_INSTANCE_URL LABELS`	string
controllers.main.initContainers.register.env[].value (2) `forgejo-runner http://forgejo-http.dev.svc.cluster.local:3000 ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest`	string
controllers.main.initContainers.register.env[].valueFrom.secretKeyRef.key (2) `TOKEN`	string
controllers.main.initContainers.register.env[].valueFrom.secretKeyRef.name (2) `forgejo-runner`	string
controllers.main.initContainers.register.image.pullPolicy (2) `IfNotPresent`	string
controllers.main.initContainers.register.image.repository (2) `code.forgejo.org/forgejo/runner`	string
controllers.main.initContainers.register.image.tag (2) `12.10.2`	string
controllers.main.replicas (2) `1`	number
controllers.main.type (2) `statefulset`	string
persistence.config.type (12) `configMap`	string
persistence.config.globalMounts[].path (10) `/config`	string
persistence.config.globalMounts[].readOnly (3) `true`	boolean
persistence.config.globalMounts[].subPath (3) `config.yaml`	string
persistence.config.identifier (6) `config`	string
persistence.config.name (6) `forgejo-runner-configmap`	string
persistence.config.enabled (2) `true`	boolean
persistence.tmpfs.globalMounts[].path (7) `/data /tmp`	string
persistence.tmpfs.globalMounts[].subPath (7) `data tmp`	string
persistence.tmpfs.type (7) `emptyDir`	string
persistence.tmpfs.sizeLimit (2) `10Gi`	string
persistence.docker-certs.globalMounts[].path (6) `/certs`	string
persistence.docker-certs.type (6) `emptyDir`	string
persistence.docker-certs.enabled (2) `true`	boolean
persistence.docker-certs.sizeLimit (2) `100Mi`	string
persistence.plugin.globalMounts[].path (5) `/plugin`	string
persistence.plugin.type (5) `emptyDir`	string
persistence.runner-data.globalMounts[].path (5) `/data`	string
persistence.runner-data.type (3) `emptyDir`	string
persistence.runner-data.accessMode (2) `ReadWriteOnce`	string
persistence.runner-data.enabled (2) `true`	boolean
persistence.runner-data.size (2) `10Gi`	string
persistence.runner-data.storageClass (2) `local-path`	string
persistence.runner-secret.globalMounts[].path (5) `/etc/forgejo-runner-secret`	string
persistence.runner-secret.globalMounts[].readOnly (5) `true`	boolean
persistence.runner-secret.name (5) `forgejo-runner-secret`	string
persistence.runner-secret.type (5) `secret`	string
persistence.cache.type (2) `emptyDir`	string
persistence.cache.accessMode (1) `ReadWriteOnce`	string
persistence.cache.globalMounts[].path (1) `/data/cache`	string
persistence.cache.size (1) `10Gi`	string
persistence.cache.storageClass (1) `democratic-csi-hostpath`	string
persistence.certs.type (2) `emptyDir`	string
persistence.docker-data.accessMode (2) `ReadWriteOnce`	string
persistence.docker-data.enabled (2) `true`	boolean
persistence.docker-data.globalMounts[].path (2) `/var/lib/docker`	string
persistence.docker-data.size (2) `10Gi`	string
persistence.docker-data.storageClass (2) `local-path`	string
rbac.bindings.forgejo-runner.roleRef.identifier (6) `forgejo-runner`	string
rbac.bindings.forgejo-runner.subjects[].identifier (6) `forgejo-runner`	string
rbac.bindings.forgejo-runner.type (6) `RoleBinding`	string
rbac.roles.forgejo-runner.rules[].apiGroups[] (6) `- batch - - -`	string
rbac.roles.forgejo-runner.rules[].resources[] (6) `- jobs - pods - pods/exec - pods/log`	string
rbac.roles.forgejo-runner.rules[].verbs[] (6) `- create - get - list - watch - delete - list - watch - get - create - get - list - watch - get`	string
rbac.roles.forgejo-runner.type (6) `Role`	string
service.app.controller (6) `forgejo-runner`	string
service.app.ports.http.port (6) `45315`	number
service.main.controller (2) `main`	string
service.main.enabled (2) `false`	boolean
configMaps.config.data."podspec-default.yaml" (5) `containers: - env: - name: DEBIAN_FRONTEND value: noninteractive image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:a734c9ce7102d891f33cd9b64497255626df1a976179e73befe9851d5659cf6b imagePullPolicy: IfNotPresent name: main resources: limits: memory: 2Gi requests: cpu: 100m memory: 256Mi restartPolicy: Never`	string
configMaps.config.data."runner.yaml" (5) cache: enabled: true dir: /data/cache container: docker_host: "-" workdir_parent: shared/workdir host: workdir_parent: /data/act kubernetes: namespace: dev poll_timeout: 3h log: level: info plugins: k8s: address: unix:///plugin/forgejo-runner-k8s.sock options: namespace: dev poll_timeout: 10m labels: "app.kubernetes.io/instance=env-${ENV_ID}" runner: capacity: 5 file: /persistent/.runner labels: - ubuntu-latest:k8s:/config/podspec-default.yaml - ubuntu-24.04:k8spod:/config/podspec-default.yaml - default:k8s:/config/podspec-default.yaml - docker:k8s:/config/podspec-dind.yaml timeout: 6h	string
configMaps.config.data."podspec-dind.yaml" (3) initContainers: - name: dind image: docker:29-dind securityContext: privileged: true restartPolicy: Always env: - name: DOCKER_TLS_CERTDIR value: /certs args: - --registry-mirror=https://mirror.gcr.io resources: requests: cpu: 100m memory: 256Mi limits: memory: 4Gi volumeMounts: - name: docker-storage mountPath: /var/lib/docker - name: docker-certs mountPath: /certs readinessProbe: exec: command: - sh - -c - test -f /certs/client/ca.pem && test -f /certs/client/cert.pem && test -f /certs/client/key.pem initialDelaySeconds: 2 periodSeconds: 1 containers: - env: - name: DEBIAN_FRONTEND value: noninteractive - name: DOCKER_HOST value: tcp://localhost:2376 - name: DOCKER_TLS_VERIFY value: "1" - name: DOCKER_CERT_PATH value: /certs/client image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:a734c9ce7102d891f33cd9b64497255626df1a976179e73befe9851d5659cf6b imagePullPolicy: IfNotPresent name: main resources: limits: memory: 2Gi requests: cpu: 100m memory: 256Mi volumeMounts: - name: docker-certs mountPath: /certs readOnly: true volumes: - name: docker-storage emptyDir: {} - name: docker-certs emptyDir: {} restartPolicy: Never	string
configMaps.config.data."config.yaml" (1) `log: level: info runner: file: .runner capacity: 1 envs: CLEEB: true DOCKER_HOST: tcp://127.0.0.1:2376 DOCKER_TLS_VERIFY: 1 DOCKER_CERT_PATH: /certs/client env_file: .env timeout: 3h insecure: false fetch_timeout: 5s fetch_interval: 2s labels: [] cache: enabled: true dir: "" host: "" port: 0 container: network: "host" enable_ipv6: false privileged: false options: "-v /certs/client:/certs/client" workdir_parent: valid_volumes: - /certs/client docker_host: "" host: workdir_parent:`	string
configMaps.config.suffix (5) `config`	string
defaultPodOptions.automountServiceAccountToken (1) `true`	boolean
defaultPodOptions.priorityClassName (1) `cluster-low`	string
defaultPodOptions.securityContext.fsGroup (1) `1000`	number
defaultPodOptions.securityContext.fsGroupChangePolicy (1) `OnRootMismatch`	string

Key

Types

controllers.forgejo-runner.annotations."reloader.stakater.com/auto" (12)

true

string

controllers.forgejo-runner.replicas (11)

number

controllers.forgejo-runner.type (10)

statefulset

string

controllers.forgejo-runner.pod.securityContext.fsGroup (8)

number

controllers.forgejo-runner.pod.securityContext.fsGroupChangePolicy (8)

OnRootMismatch

string

controllers.forgejo-runner.pod.securityContext.runAsGroup (7)

number

controllers.forgejo-runner.pod.securityContext.runAsNonRoot (7)

true

boolean

controllers.forgejo-runner.pod.securityContext.runAsUser (7)

number

controllers.forgejo-runner.pod.securityContext.seccompProfile.type (1)

RuntimeDefault

string

controllers.forgejo-runner.pod.labels."app.kubernetes.io/component" (7)

forgejo-runner

string

controllers.forgejo-runner.pod.automountServiceAccountToken (5)

true

boolean

controllers.forgejo-runner.pod.terminationGracePeriodSeconds (2)

number

controllers.forgejo-runner.pod.annotations."reloader.stakater.com/auto" (1)

true

string

controllers.forgejo-runner.containers.runner.command[] (7)

- sh
- -ec
- exec /bin/forgejo-runner daemon \
  --config /config/runner.yaml \
  --url "http://forgejo-http:3000" \
  --uuid "$(cat /etc/forgejo-runner-secret/uuid)" \
  --token-url file:///etc/forgejo-runner-secret/token

string

controllers.forgejo-runner.containers.runner.image.repository (7)

git.erwanleboucher.dev/eleboucher/runner

string

controllers.forgejo-runner.containers.runner.image.tag (7)

12.10.2@sha256:d5eeafda573012c229b730f5a18437b464d946473478e1f6bd56fd537b881609

string

controllers.forgejo-runner.containers.runner.resources.requests.cpu (7)

5m

string

controllers.forgejo-runner.containers.runner.resources.requests.memory (7)

32Mi

string

controllers.forgejo-runner.containers.runner.resources.limits.memory (2)

512Mi

string

controllers.forgejo-runner.containers.runner.securityContext.allowPrivilegeEscalation (7)

false

boolean

controllers.forgejo-runner.containers.runner.securityContext.capabilities.drop[] (7)

- ALL

string

controllers.forgejo-runner.containers.runner.securityContext.readOnlyRootFilesystem (7)

true

boolean

controllers.forgejo-runner.containers.app.command[] (6)

- sh
- -c
- while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner --config /config/config.yaml daemon

string

controllers.forgejo-runner.containers.app.env[].name (6)

DOCKER_HOST
DOCKER_CERT_PATH
DOCKER_TLS_VERIFY

string

controllers.forgejo-runner.containers.app.env[].value (6)

tcp://localhost:2376
/certs/client
1

string

controllers.forgejo-runner.containers.app.image.repository (6)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.containers.app.image.tag (6)

12.10.2

string

controllers.forgejo-runner.containers.app.securityContext.privileged (3)

true

boolean

controllers.forgejo-runner.containers.app.resources.limits.memory (2)

100Mi

string

controllers.forgejo-runner.containers.app.resources.requests.cpu (2)

10m

string

controllers.forgejo-runner.containers.app.resources.requests.memory (2)

100Mi

string

controllers.forgejo-runner.containers.daemon.env[].name (6)

DOCKER_TLS_CERTDIR

string

controllers.forgejo-runner.containers.daemon.env[].value (6)

/certs

string

controllers.forgejo-runner.containers.daemon.image.repository (6)

docker

string

controllers.forgejo-runner.containers.daemon.image.tag (6)

29.5.3-dind

string

controllers.forgejo-runner.containers.daemon.securityContext.privileged (6)

true

boolean

controllers.forgejo-runner.containers.daemon.resources.limits.memory (2)

194Mi

string

controllers.forgejo-runner.containers.daemon.resources.requests.cpu (2)

10m

string

controllers.forgejo-runner.containers.daemon.resources.requests.memory (2)

194Mi

string

controllers.forgejo-runner.containers.k8s-plugin.args[] (3)

- --listen
- unix:///plugin/forgejo-runner-k8s.sock

string

controllers.forgejo-runner.containers.k8s-plugin.image.repository (3)

git.erwanleboucher.dev/eleboucher/runner-k8s-plugin

string

controllers.forgejo-runner.containers.k8s-plugin.image.tag (3)

12.10.6@sha256:b0ffe279448c70fb3327485163da8da2ce12fa9cc39a29231edd676c9025c036

string

controllers.forgejo-runner.containers.k8s-plugin.resources.requests.cpu (3)

5m

string

controllers.forgejo-runner.containers.k8s-plugin.resources.requests.memory (3)

32Mi

string

controllers.forgejo-runner.containers.k8s-plugin.securityContext.allowPrivilegeEscalation (3)

false

boolean

controllers.forgejo-runner.containers.k8s-plugin.securityContext.capabilities.drop[] (3)

- ALL

string

controllers.forgejo-runner.containers.k8s-plugin.securityContext.readOnlyRootFilesystem (3)

true

boolean

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].accessMode (5)

ReadWriteOnce

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].path (5)

/persistent

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].subPath (1)

cache
docker

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].name (5)

persistent

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].size (5)

1Gi

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].storageClass (1)

openebs-hostpath

string

controllers.forgejo-runner.statefulset.podManagementPolicy (1)

Parallel

string

controllers.forgejo-runner.initContainers.runner-register.command[] (4)

- sh
- -c

string

controllers.forgejo-runner.initContainers.runner-register.env[].name (4)

RUNNER_NAME
RUNNER_TOKEN
FORGEJO_INSTANCE_URL

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.key (4)

RUNNER_TOKEN

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.name (4)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.fieldRef.fieldPath (3)

metadata.name

string

controllers.forgejo-runner.initContainers.runner-register.env[].value (2)

http://forgejo-http.code.svc.cluster.local:3000

string

controllers.forgejo-runner.initContainers.runner-register.image.repository (4)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.initContainers.runner-register.image.tag (4)

12.10.2

string

controllers.forgejo-runner.initContainers.runner-register.args[] (3)

- forgejo-runner register --no-interactive --token $(RUNNER_TOKEN) --name $(RUNNER_NAME) --instance $(FORGEJO_INSTANCE_URL) --labels self-hosted:host,docker:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04,renovate:docker://ghcr.io/catthehacker/ubuntu:act-22.04 ;
forgejo-runner generate-config > /data/config.yml ;
sed -i -e "s|network: .*|network: host|" /data/config.yml ;
sed -i -e "s|^  envs:$|  envs:\n    DOCKER_HOST: tcp://localhost:2376\n    DOCKER_TLS_VERIFY: 1\n    DOCKER_CERT_PATH: /certs/client|" /data/config.yml ;
sed -i -e "s|^  options:|  options: -v /certs/client:/certs/client|" /data/config.yml ;
sed -i -e "s|  valid_volumes: \[\]$|  valid_volumes:\n    - /certs/client|" /data/config.yml ;

string

controllers.forgejo-runner.initContainers.k8s-plugin.args[] (2)

- --listen
- unix:///plugin/forgejo-runner-k8s.sock

string

controllers.forgejo-runner.initContainers.k8s-plugin.image.repository (2)

registry.erwanleboucher.dev/erwanleboucher.dev/eleboucher/runner-k8s-plugin

string

controllers.forgejo-runner.initContainers.k8s-plugin.image.tag (2)

12.10.6@sha256:b0ffe279448c70fb3327485163da8da2ce12fa9cc39a29231edd676c9025c036

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.limits.memory (2)

128Mi

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.cpu (2)

5m

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.memory (2)

32Mi

string

controllers.forgejo-runner.initContainers.k8s-plugin.restartPolicy (2)

Always

string

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.allowPrivilegeEscalation (2)

false

boolean

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.capabilities.drop[] (2)

- ALL

string

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.readOnlyRootFilesystem (2)

true

boolean

controllers.forgejo-runner.initContainers.register-runner.command[] (2)

- sh
- -c
- if [ -f /persistent/.runner ]; then
  echo "Runner already registered, skipping"
  exit 0
fi
echo "Registering runner..."
cd /persistent && forgejo-runner register \
  --instance http://forgejo-http.development.svc.cluster.local:3000 \
  --token "${FORGEJO_RUNNER_TOKEN}" \
  --name k8s-runner \
  --labels "default:k8spod:/config/podspec-default.yaml" \
  --no-interactive

string

controllers.forgejo-runner.initContainers.register-runner.image.repository (2)

git.erwanleboucher.dev/eleboucher/runner

string

controllers.forgejo-runner.initContainers.register-runner.image.tag (2)

latest@sha256:ac15b5ac34ec2021f33a37d4b104eb138951444eeda903be4315178d9f068ea1

string

controllers.forgejo-runner.initContainers.register-runner.env[].name (1)

RUNNER_TOKEN

string

controllers.forgejo-runner.initContainers.register-runner.env[].valueFrom.secretKeyRef.key (1)

RUNNER_TOKEN

string

controllers.forgejo-runner.initContainers.register-runner.env[].valueFrom.secretKeyRef.name (1)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.register-runner.envFrom[].secretRef.name (1)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.register.command[] (2)

- sh
- -c
- if [ ! -f /data/.runner ]; then
  echo "Registering runner...";
  forgejo-runner register --no-interactive \
    --token $(RUNNER_TOKEN) \
    --name $(RUNNER_NAME) \
    --instance $(FORGEJO_INSTANCE_URL) \
    --labels "$(LABELS)";
else
  echo "Runner already registered, skipping.";
fi

string

controllers.forgejo-runner.initContainers.register.env.FORGEJO_INSTANCE_URL (2)

https://git.m00nlit.dev

string

controllers.forgejo-runner.initContainers.register.env.LABELS (2)

ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest

string

controllers.forgejo-runner.initContainers.register.envFrom[].secretRef.name (2)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.register.image.repository (2)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.initContainers.register.image.tag (2)

12.10.1@sha256:3d49075f9115054ae2485d8cea2819296a904dfd4f00017285168028615d8533

string

controllers.forgejo-runner.podDisruptionBudget.minAvailable (1)

number

controllers.main.containers.daemon.env[].name (2)

DOCKER_TLS_CERTDIR

string

controllers.main.containers.daemon.env[].value (2)

/certs

string

controllers.main.containers.daemon.image.repository (2)

mirror.gcr.io/docker

string

controllers.main.containers.daemon.image.tag (2)

29.5.3-dind

string

controllers.main.containers.daemon.resources.limits.ephemeral-storage (2)

500Mi

string

controllers.main.containers.daemon.resources.limits.memory (2)

200Mi

string

controllers.main.containers.daemon.resources.requests.cpu (2)

10m

string

controllers.main.containers.daemon.resources.requests.ephemeral-storage (2)

200Mi

string

controllers.main.containers.daemon.resources.requests.memory (2)

20Mi

string

controllers.main.containers.daemon.securityContext.privileged (2)

true

boolean

controllers.main.containers.main.command[] (2)

- sh
- -c
- while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner daemon --config /config/config.yaml

string

controllers.main.containers.main.env[].name (2)

DOCKER_HOST
DOCKER_CERT_PATH
DOCKER_TLS_VERIFY

string

controllers.main.containers.main.env[].value (2)

tcp://localhost:2376
/certs/client
1

string

controllers.main.containers.main.image.pullPolicy (2)

IfNotPresent

string

controllers.main.containers.main.image.repository (2)

code.forgejo.org/forgejo/runner

string

controllers.main.containers.main.image.tag (2)

12.10.2

string

controllers.main.containers.main.resources.limits.ephemeral-storage (2)

500Mi

string

controllers.main.containers.main.resources.limits.memory (2)

500Mi

string

controllers.main.containers.main.resources.requests.cpu (2)

10m

string

controllers.main.containers.main.resources.requests.ephemeral-storage (2)

200Mi

string

controllers.main.containers.main.resources.requests.memory (2)

100Mi

string

controllers.main.containers.main.securityContext.fsGroup (2)

number

controllers.main.containers.main.securityContext.fsGroupChangePolicy (2)

OnRootMismatch

string

controllers.main.containers.main.securityContext.runAsGroup (2)

number

controllers.main.containers.main.securityContext.runAsUser (2)

number

controllers.main.initContainers.register.command[] (2)

- sh
- -c
- if [ ! -f /data/.runner ]; then
  echo "Registering runner...";
  forgejo-runner register --no-interactive \
    --token ${RUNNER_TOKEN}
    --name ${RUNNER_NAME}
    --instance ${FORGEJO_INSTANCE_URL}
    -- labels "${LABELS}";
else
  echo "Runner already registered, skipping.";
fi

string

controllers.main.initContainers.register.env[].name (2)

RUNNER_NAME
RUNNER_SECRET
FORGEJO_INSTANCE_URL
LABELS

string

controllers.main.initContainers.register.env[].value (2)

forgejo-runner
http://forgejo-http.dev.svc.cluster.local:3000
ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest

string

controllers.main.initContainers.register.env[].valueFrom.secretKeyRef.key (2)

TOKEN

string

controllers.main.initContainers.register.env[].valueFrom.secretKeyRef.name (2)

forgejo-runner

string

controllers.main.initContainers.register.image.pullPolicy (2)

IfNotPresent

string

controllers.main.initContainers.register.image.repository (2)

code.forgejo.org/forgejo/runner

string

controllers.main.initContainers.register.image.tag (2)

12.10.2

string

controllers.main.replicas (2)

number

controllers.main.type (2)

statefulset

string

persistence.config.type (12)

configMap

string

persistence.config.globalMounts[].path (10)

/config

string

persistence.config.globalMounts[].readOnly (3)

true

boolean

persistence.config.globalMounts[].subPath (3)

config.yaml

string

persistence.config.identifier (6)

config

string

persistence.config.name (6)

forgejo-runner-configmap

string

persistence.config.enabled (2)

true

boolean

persistence.tmpfs.globalMounts[].path (7)

/data
/tmp

string

persistence.tmpfs.globalMounts[].subPath (7)

data
tmp

string

persistence.tmpfs.type (7)

emptyDir

string

persistence.tmpfs.sizeLimit (2)

10Gi

string

persistence.docker-certs.globalMounts[].path (6)

/certs

string

persistence.docker-certs.type (6)

emptyDir

string

persistence.docker-certs.enabled (2)

true

boolean

persistence.docker-certs.sizeLimit (2)

100Mi

string

persistence.plugin.globalMounts[].path (5)

/plugin

string

persistence.plugin.type (5)

emptyDir

string

persistence.runner-data.globalMounts[].path (5)

/data

string

persistence.runner-data.type (3)

emptyDir

string

persistence.runner-data.accessMode (2)

ReadWriteOnce

string

persistence.runner-data.enabled (2)

true

boolean

persistence.runner-data.size (2)

10Gi

string

persistence.runner-data.storageClass (2)

local-path

string

persistence.runner-secret.globalMounts[].path (5)

/etc/forgejo-runner-secret

string

persistence.runner-secret.globalMounts[].readOnly (5)

true

boolean

persistence.runner-secret.name (5)

forgejo-runner-secret

string

persistence.runner-secret.type (5)

secret

string

persistence.cache.type (2)

emptyDir

string

persistence.cache.accessMode (1)

ReadWriteOnce

string

persistence.cache.globalMounts[].path (1)

/data/cache

string

persistence.cache.size (1)

10Gi

string

persistence.cache.storageClass (1)

democratic-csi-hostpath

string

persistence.certs.type (2)

emptyDir

string

persistence.docker-data.accessMode (2)

ReadWriteOnce

string

persistence.docker-data.enabled (2)

true

boolean

persistence.docker-data.globalMounts[].path (2)

/var/lib/docker

string

persistence.docker-data.size (2)

10Gi

string

persistence.docker-data.storageClass (2)

local-path

string

rbac.bindings.forgejo-runner.roleRef.identifier (6)

forgejo-runner

string

rbac.bindings.forgejo-runner.subjects[].identifier (6)

forgejo-runner

string

rbac.bindings.forgejo-runner.type (6)

RoleBinding

string

rbac.roles.forgejo-runner.rules[].apiGroups[] (6)

- batch
- 
- 
-

string

rbac.roles.forgejo-runner.rules[].resources[] (6)

- jobs
- pods
- pods/exec
- pods/log

string

rbac.roles.forgejo-runner.rules[].verbs[] (6)

- create
- get
- list
- watch
- delete
- list
- watch
- get
- create
- get
- list
- watch
- get

string

rbac.roles.forgejo-runner.type (6)

Role

string

service.app.controller (6)

forgejo-runner

string

service.app.ports.http.port (6)

number

service.main.controller (2)

main

string

service.main.enabled (2)

false

boolean

configMaps.config.data."podspec-default.yaml" (5)

containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:a734c9ce7102d891f33cd9b64497255626df1a976179e73befe9851d5659cf6b
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        memory: 2Gi
      requests:
        cpu: 100m
        memory: 256Mi
restartPolicy: Never

string

configMaps.config.data."runner.yaml" (5)

cache:
  enabled: true
  dir: /data/cache
container:
  docker_host: "-"
  workdir_parent: shared/workdir
host:
  workdir_parent: /data/act
kubernetes:
  namespace: dev
  poll_timeout: 3h
log:
  level: info
plugins:
  k8s:
    address: unix:///plugin/forgejo-runner-k8s.sock
    options:
      namespace: dev
      poll_timeout: 10m
      labels: "app.kubernetes.io/instance=env-${ENV_ID}"
runner:
  capacity: 5
  file: /persistent/.runner
  labels:
    - ubuntu-latest:k8s:/config/podspec-default.yaml
    - ubuntu-24.04:k8spod:/config/podspec-default.yaml
    - default:k8s:/config/podspec-default.yaml
    - docker:k8s:/config/podspec-dind.yaml
  timeout: 6h

string

configMaps.config.data."podspec-dind.yaml" (3)

initContainers:
  - name: dind
    image: docker:29-dind
    securityContext:
      privileged: true
    restartPolicy: Always
    env:
      - name: DOCKER_TLS_CERTDIR
        value: /certs
    args:
      - --registry-mirror=https://mirror.gcr.io
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        memory: 4Gi
    volumeMounts:
      - name: docker-storage
        mountPath: /var/lib/docker
      - name: docker-certs
        mountPath: /certs
    readinessProbe:
      exec:
        command:
          - sh
          - -c
          - test -f /certs/client/ca.pem && test -f /certs/client/cert.pem && test -f /certs/client/key.pem
      initialDelaySeconds: 2
      periodSeconds: 1
containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
      - name: DOCKER_HOST
        value: tcp://localhost:2376
      - name: DOCKER_TLS_VERIFY
        value: "1"
      - name: DOCKER_CERT_PATH
        value: /certs/client
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:a734c9ce7102d891f33cd9b64497255626df1a976179e73befe9851d5659cf6b
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        memory: 2Gi
      requests:
        cpu: 100m
        memory: 256Mi
    volumeMounts:
      - name: docker-certs
        mountPath: /certs
        readOnly: true
volumes:
  - name: docker-storage
    emptyDir: {}
  - name: docker-certs
    emptyDir: {}
restartPolicy: Never

string

configMaps.config.data."config.yaml" (1)

log:
  level: info

runner:
  file: .runner
  capacity: 1
  envs:
    CLEEB: true
    DOCKER_HOST: tcp://127.0.0.1:2376
    DOCKER_TLS_VERIFY: 1
    DOCKER_CERT_PATH: /certs/client
  env_file: .env
  timeout: 3h
  insecure: false
  fetch_timeout: 5s
  fetch_interval: 2s
  labels: []

cache:
  enabled: true
  dir: ""
  host: ""
  port: 0

container:
  network: "host"
  enable_ipv6: false
  privileged: false
  options: "-v /certs/client:/certs/client"
  workdir_parent:
  valid_volumes:
    - /certs/client
  docker_host: ""

host:
  workdir_parent:

string

configMaps.config.suffix (5)