forgejo-runner helm release

forgejo-runner helm

No introduction found. Create it?

More popular helm chart found

forgejo-runner from bjw-s-labs/charts/ is more popular with 12 repositories.

Install

Install with:

helm repo add forgejo-runner oci://ghcr.io/bjw-s-labs/charts/
helm install forgejo-runner forgejo-runner/forgejo-runner -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (2 out of 9)

Name	Repo	Stars	Version	Timestamp
forgejo-runner	bjw-s-labs/home-ops	828	5.0.0	6 days ago
forgejo-runner	bjw-s/home-ops	395	5.0.0	6 days ago

Name

Repo

Stars

Version

Timestamp

forgejo-runner

bjw-s-labs/home-ops

828

5.0.0

6 days ago

forgejo-runner

bjw-s/home-ops

395

5.0.0

6 days ago

Values

See the most popular values for this chart:

Key	Types
controllers.forgejo-runner.annotations."reloader.stakater.com/auto" (9) `true`	string
controllers.forgejo-runner.replicas (8) `1`	number
controllers.forgejo-runner.pod.securityContext.fsGroup (7) `1000`	number
controllers.forgejo-runner.pod.securityContext.fsGroupChangePolicy (7) `OnRootMismatch`	string
controllers.forgejo-runner.pod.securityContext.runAsGroup (6) `1000`	number
controllers.forgejo-runner.pod.securityContext.runAsNonRoot (6) `true`	boolean
controllers.forgejo-runner.pod.securityContext.runAsUser (6) `1000`	number
controllers.forgejo-runner.pod.labels."app.kubernetes.io/component" (6) `forgejo-runner`	string
controllers.forgejo-runner.pod.automountServiceAccountToken (3) `true`	boolean
controllers.forgejo-runner.type (7) `deployment`	string
controllers.forgejo-runner.containers.runner.command[] (6) `- sh - -ec - exec /bin/forgejo-runner daemon \ --config /config/runner.yaml \ --url "http://forgejo-http:3000" \ --uuid "$(cat /etc/forgejo-runner-secret/uuid)" \ --token-url file:///etc/forgejo-runner-secret/token`	string
controllers.forgejo-runner.containers.runner.image.repository (6) `git.erwanleboucher.dev/eleboucher/runner`	string
controllers.forgejo-runner.containers.runner.image.tag (6) `12.10.1@sha256:0a8ef9dd41a4c29903db8f9f125b20e58e2ccb5c3c539beb1e02db139d7cf7a2`	string
controllers.forgejo-runner.containers.runner.resources.requests.cpu (6) `5m`	string
controllers.forgejo-runner.containers.runner.resources.requests.memory (6) `32Mi`	string
controllers.forgejo-runner.containers.runner.resources.limits.memory (2) `512Mi`	string
controllers.forgejo-runner.containers.runner.securityContext.allowPrivilegeEscalation (6) `false`	boolean
controllers.forgejo-runner.containers.runner.securityContext.capabilities.drop[] (6) `- ALL`	string
controllers.forgejo-runner.containers.runner.securityContext.readOnlyRootFilesystem (6) `true`	boolean
controllers.forgejo-runner.containers.k8s-plugin.args[] (5) `- --listen - unix:///plugin/forgejo-runner-k8s.sock`	string
controllers.forgejo-runner.containers.k8s-plugin.image.repository (5) `git.erwanleboucher.dev/eleboucher/runner-k8s-plugin`	string
controllers.forgejo-runner.containers.k8s-plugin.image.tag (5) `12.10.0@sha256:c1b8145843d9e2f48ad6c7053e3aab184bea189cc868ba7f0ac6b34a905464d5`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.requests.cpu (5) `5m`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.requests.memory (5) `32Mi`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.limits.memory (2) `128Mi`	string
controllers.forgejo-runner.containers.k8s-plugin.securityContext.allowPrivilegeEscalation (5) `false`	boolean
controllers.forgejo-runner.containers.k8s-plugin.securityContext.capabilities.drop[] (5) `- ALL`	string
controllers.forgejo-runner.containers.k8s-plugin.securityContext.readOnlyRootFilesystem (5) `true`	boolean
controllers.forgejo-runner.containers.app.command[] (3) `- sh - -c - while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner --config /data/config.yml daemon`	string
controllers.forgejo-runner.containers.app.env[].name (3) `DOCKER_HOST DOCKER_CERT_PATH DOCKER_TLS_VERIFY`	string
controllers.forgejo-runner.containers.app.env[].value (3) `tcp://localhost:2376 /certs/client 0`	string
controllers.forgejo-runner.containers.app.image.repository (3) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.containers.app.image.tag (3) `12.10.1@sha256:3d49075f9115054ae2485d8cea2819296a904dfd4f00017285168028615d8533`	string
controllers.forgejo-runner.containers.app.securityContext.privileged (2) `true`	boolean
controllers.forgejo-runner.containers.app.resources.limits.cpu (1) `1000m`	string
controllers.forgejo-runner.containers.app.resources.limits.memory (1) `100Mi`	string
controllers.forgejo-runner.containers.app.resources.requests.cpu (1) `10m`	string
controllers.forgejo-runner.containers.app.resources.requests.memory (1) `100Mi`	string
controllers.forgejo-runner.containers.daemon.env[].name (3) `DOCKER_TLS_CERTDIR`	string
controllers.forgejo-runner.containers.daemon.env[].value (3) `/certs`	string
controllers.forgejo-runner.containers.daemon.image.repository (3) `docker`	string
controllers.forgejo-runner.containers.daemon.image.tag (3) `29.4.3-dind@sha256:685b91dca8eab7de1dce1c303dbb7a763e4082d6a60db10968adf3295fbd2495`	string
controllers.forgejo-runner.containers.daemon.securityContext.privileged (3) `true`	boolean
controllers.forgejo-runner.containers.daemon.resources.limits.cpu (1) `1000m`	string
controllers.forgejo-runner.containers.daemon.resources.limits.memory (1) `194Mi`	string
controllers.forgejo-runner.containers.daemon.resources.requests.cpu (1) `10m`	string
controllers.forgejo-runner.containers.daemon.resources.requests.memory (1) `194Mi`	string
controllers.forgejo-runner.initContainers.runner-register.args[] (2) - forgejo-runner register --no-interactive --token $(RUNNER_TOKEN) --name $(RUNNER_NAME) --instance $(FORGEJO_INSTANCE_URL) --labels self-hosted:host,docker:docker://ghcr.io/catthehacker/ubuntu:act-24.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-24.04,ubuntu-24.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04,renovate:docker://ghcr.io/catthehacker/ubuntu:act-24.04 ; forgejo-runner generate-config > /data/config.yml ; sed -i -e "s\|network: .*\|network: host\|" /data/config.yml ; sed -i -e "s\|^ envs:$\| envs:\n DOCKER_HOST: tcp://localhost:2376\n DOCKER_TLS_VERIFY: 1\n DOCKER_CERT_PATH: /certs/client\|" /data/config.yml ; sed -i -e "s\|^ options:\| options: -v /certs/client:/certs/client\|" /data/config.yml ; sed -i -e "s\| valid_volumes: \[\]$\| valid_volumes:\n - /certs/client\|" /data/config.yml ;	string
controllers.forgejo-runner.initContainers.runner-register.command[] (2) `- sh - -c`	string
controllers.forgejo-runner.initContainers.runner-register.env[].name (2) `RUNNER_NAME RUNNER_TOKEN FORGEJO_INSTANCE_URL`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.fieldRef.fieldPath (2) `metadata.name`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.key (2) `RUNNER_TOKEN FORGEJO_INSTANCE_URL`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.name (2) `forgejo-runner-secret forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.runner-register.image.repository (2) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.initContainers.runner-register.image.tag (2) `12.10.1@sha256:3d49075f9115054ae2485d8cea2819296a904dfd4f00017285168028615d8533`	string
controllers.forgejo-runner.initContainers.copy-k8s-plugin.command[] (1) `- sh - -c - cp /usr/local/bin/forgejo-runner-k8s /plugins/forgejo-runner-k8s`	string
controllers.forgejo-runner.initContainers.copy-k8s-plugin.image.repository (1) `git.erwanleboucher.dev/eleboucher/runner-k8s-plugin-v2`	string
controllers.forgejo-runner.initContainers.copy-k8s-plugin.image.tag (1) `sha-f7ab06b75887e5497c9f9f9bef641aafb2ae3e1c`	string
controllers.forgejo-runner.initContainers.copy-k8s-plugin.securityContext.allowPrivilegeEscalation (1) `false`	boolean
controllers.forgejo-runner.initContainers.copy-k8s-plugin.securityContext.capabilities.drop[] (1) `- ALL`	string
controllers.forgejo-runner.initContainers.copy-k8s-plugin.securityContext.readOnlyRootFilesystem (1) `true`	boolean
controllers.forgejo-runner.initContainers.register-runner.command[] (1) `- sh - -c - if [ -f /persistent/.runner ]; then echo "Runner already registered, skipping" exit 0 fi echo "Registering runner..." cd /persistent && forgejo-runner register \ --instance https://git.cnas.dev \ --token "$(RUNNER_TOKEN)" \ --name k8s-runner \ --labels "default:k8spod:/config/podspec-default.yaml" \ --no-interactive`	string
controllers.forgejo-runner.initContainers.register-runner.env[].name (1) `RUNNER_TOKEN`	string
controllers.forgejo-runner.initContainers.register-runner.env[].valueFrom.secretKeyRef.key (1) `token`	string
controllers.forgejo-runner.initContainers.register-runner.env[].valueFrom.secretKeyRef.name (1) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.register-runner.image.repository (1) `git.erwanleboucher.dev/eleboucher/runner`	string
controllers.forgejo-runner.initContainers.register-runner.image.tag (1) `sha-63d5504927ba6b9d511c0972beaf4ff5b3705f82`	string
controllers.forgejo-runner.initContainers.register.command[] (1) `- sh - -c - if [ ! -f /data/.runner ]; then echo "Registering runner..."; forgejo-runner register --no-interactive \ --token $(RUNNER_TOKEN) \ --name $(RUNNER_NAME) \ --instance $(FORGEJO_INSTANCE_URL) \ --labels "$(LABELS)"; else echo "Runner already registered, skipping."; fi`	string
controllers.forgejo-runner.initContainers.register.env.FORGEJO_INSTANCE_URL (1) `https://forgejo.rnatr.com`	string
controllers.forgejo-runner.initContainers.register.env.LABELS (1) `ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest`	string
controllers.forgejo-runner.initContainers.register.envFrom[].secretRef.name (1) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.register.image.repository (1) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.initContainers.register.image.tag (1) `12.10.1@sha256:3d49075f9115054ae2485d8cea2819296a904dfd4f00017285168028615d8533`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].accessMode (2) `ReadWriteOnce`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].path (2) `/persistent`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].name (2) `persistent`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].size (2) `1Gi`	string
persistence.config.globalMounts[].path (7) `/config`	string
persistence.config.globalMounts[].readOnly (1) `true`	boolean
persistence.config.globalMounts[].subPath (1) `config.yaml`	string
persistence.config.type (7) `configMap`	string
persistence.config.identifier (5) `config`	string
persistence.config.name (2) `forgejo-runner-configmap`	string
persistence.tmpfs.globalMounts[].path (6) `/data /tmp`	string
persistence.tmpfs.globalMounts[].subPath (6) `data tmp`	string
persistence.tmpfs.type (6) `emptyDir`	string
persistence.runner-secret.globalMounts[].path (5) `/etc/forgejo-runner-secret`	string
persistence.runner-secret.globalMounts[].readOnly (5) `true`	boolean
persistence.runner-secret.name (5) `forgejo-runner-secret`	string
persistence.runner-secret.type (5) `secret`	string
persistence.plugin.type (4) `emptyDir`	string
persistence.plugin.globalMounts[].path (3) `/plugin`	string
persistence.docker-certs.globalMounts[].path (2) `/certs`	string
persistence.docker-certs.type (2) `emptyDir`	string
persistence.plugins.globalMounts[].path (2) `/plugins`	string
persistence.plugins.type (2) `emptyDir`	string
persistence.runner-data.globalMounts[].path (2) `/data`	string
persistence.runner-data.type (2) `emptyDir`	string
persistence.cache.globalMounts[].path (1) `/cache /.cache`	string
persistence.cache.globalMounts[].readOnly (1) `false false`	boolean
persistence.cache.globalMounts[].subPath (1) `cache cachelocal`	string
persistence.cache.type (1) `emptyDir`	string
persistence.certs.type (1) `emptyDir`	string
rbac.bindings.forgejo-runner.roleRef.identifier (6) `forgejo-runner`	string
rbac.bindings.forgejo-runner.subjects[].identifier (6) `forgejo-runner`	string
rbac.bindings.forgejo-runner.type (6) `RoleBinding`	string
rbac.roles.forgejo-runner.rules[].apiGroups[] (6) `- - -`	string
rbac.roles.forgejo-runner.rules[].resources[] (6) `- pods - pods/exec - pods/log`	string
rbac.roles.forgejo-runner.rules[].verbs[] (6) `- list - watch - create - get - delete - create - get - list - watch - get`	string
rbac.roles.forgejo-runner.type (6) `Role`	string
configMaps.config.data."podspec-default.yaml" (5) `containers: - env: - name: DEBIAN_FRONTEND value: noninteractive image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:f7c797a4a115129ccdca814c933c85759764940223e0f31ea27bf0c052ebac87 imagePullPolicy: IfNotPresent name: main resources: limits: memory: 2Gi requests: cpu: 100m memory: 256Mi restartPolicy: Never`	string
configMaps.config.data."podspec-dind.yaml" (5) initContainers: - name: dind image: docker:29-dind securityContext: privileged: true restartPolicy: Always env: - name: DOCKER_TLS_CERTDIR value: /certs resources: requests: cpu: 100m memory: 256Mi limits: memory: 4Gi volumeMounts: - name: docker-storage mountPath: /var/lib/docker - name: docker-certs mountPath: /certs readinessProbe: exec: command: - sh - -c - test -f /certs/client/ca.pem && test -f /certs/client/cert.pem && test -f /certs/client/key.pem initialDelaySeconds: 2 periodSeconds: 1 containers: - env: - name: DEBIAN_FRONTEND value: noninteractive - name: DOCKER_HOST value: tcp://localhost:2376 - name: DOCKER_TLS_VERIFY value: "1" - name: DOCKER_CERT_PATH value: /certs/client image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:f7c797a4a115129ccdca814c933c85759764940223e0f31ea27bf0c052ebac87 imagePullPolicy: IfNotPresent name: main resources: limits: memory: 2Gi requests: cpu: 100m memory: 256Mi volumeMounts: - name: docker-certs mountPath: /certs readOnly: true volumes: - name: docker-storage emptyDir: {} - name: docker-certs emptyDir: {} restartPolicy: Never	string
configMaps.config.data."runner.yaml" (5) cache: enabled: true dir: /data/cache container: docker_host: "-" workdir_parent: shared/workdir host: workdir_parent: /data/act kubernetes: namespace: dev poll_timeout: 10m log: level: info plugins: k8s: address: unix:///plugin/forgejo-runner-k8s.sock options: namespace: dev poll_timeout: 10m labels: "app.kubernetes.io/name=forgejo-runner-instance,app.kubernetes.io/instance=env-${ENV_ID},egress.home.arpa/custom-egress=true" runner: capacity: 2 file: /persistent/.runner labels: - ubuntu-latest:k8s:/config/podspec-default.yaml - ubuntu-24.04:k8spod:/config/podspec-default.yaml - default:k8s:/config/podspec-default.yaml - docker:k8s:/config/podspec-dind.yaml timeout: 3h	string
configMaps.config.suffix (5) `config`	string
service.app.controller (3) `forgejo-runner`	string
service.app.ports.http.port (3) `45315`	number
defaultPodOptions.automountServiceAccountToken (2) `true`	boolean

Key

Types

controllers.forgejo-runner.annotations."reloader.stakater.com/auto" (9)

true

string

controllers.forgejo-runner.replicas (8)

number

controllers.forgejo-runner.pod.securityContext.fsGroup (7)

number

controllers.forgejo-runner.pod.securityContext.fsGroupChangePolicy (7)

OnRootMismatch

string

controllers.forgejo-runner.pod.securityContext.runAsGroup (6)

number

controllers.forgejo-runner.pod.securityContext.runAsNonRoot (6)

true

boolean

controllers.forgejo-runner.pod.securityContext.runAsUser (6)

number

controllers.forgejo-runner.pod.labels."app.kubernetes.io/component" (6)

forgejo-runner

string

controllers.forgejo-runner.pod.automountServiceAccountToken (3)

true

boolean

controllers.forgejo-runner.type (7)

deployment

string

controllers.forgejo-runner.containers.runner.command[] (6)

- sh
- -ec
- exec /bin/forgejo-runner daemon \
  --config /config/runner.yaml \
  --url "http://forgejo-http:3000" \
  --uuid "$(cat /etc/forgejo-runner-secret/uuid)" \
  --token-url file:///etc/forgejo-runner-secret/token

string

controllers.forgejo-runner.containers.runner.image.repository (6)

git.erwanleboucher.dev/eleboucher/runner

string

controllers.forgejo-runner.containers.runner.image.tag (6)

12.10.1@sha256:0a8ef9dd41a4c29903db8f9f125b20e58e2ccb5c3c539beb1e02db139d7cf7a2

string

controllers.forgejo-runner.containers.runner.resources.requests.cpu (6)

5m

string

controllers.forgejo-runner.containers.runner.resources.requests.memory (6)

32Mi

string

controllers.forgejo-runner.containers.runner.resources.limits.memory (2)

512Mi

string

controllers.forgejo-runner.containers.runner.securityContext.allowPrivilegeEscalation (6)

false

boolean

controllers.forgejo-runner.containers.runner.securityContext.capabilities.drop[] (6)

- ALL

string

controllers.forgejo-runner.containers.runner.securityContext.readOnlyRootFilesystem (6)

true

boolean

controllers.forgejo-runner.containers.k8s-plugin.args[] (5)

- --listen
- unix:///plugin/forgejo-runner-k8s.sock

string

controllers.forgejo-runner.containers.k8s-plugin.image.repository (5)

git.erwanleboucher.dev/eleboucher/runner-k8s-plugin

string

controllers.forgejo-runner.containers.k8s-plugin.image.tag (5)

12.10.0@sha256:c1b8145843d9e2f48ad6c7053e3aab184bea189cc868ba7f0ac6b34a905464d5

string

controllers.forgejo-runner.containers.k8s-plugin.resources.requests.cpu (5)

5m

string

controllers.forgejo-runner.containers.k8s-plugin.resources.requests.memory (5)

32Mi

string

controllers.forgejo-runner.containers.k8s-plugin.resources.limits.memory (2)

128Mi

string

controllers.forgejo-runner.containers.k8s-plugin.securityContext.allowPrivilegeEscalation (5)

false

boolean

controllers.forgejo-runner.containers.k8s-plugin.securityContext.capabilities.drop[] (5)

- ALL

string

controllers.forgejo-runner.containers.k8s-plugin.securityContext.readOnlyRootFilesystem (5)

true

boolean

controllers.forgejo-runner.containers.app.command[] (3)

- sh
- -c
- while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner --config /data/config.yml daemon

string

controllers.forgejo-runner.containers.app.env[].name (3)

DOCKER_HOST
DOCKER_CERT_PATH
DOCKER_TLS_VERIFY

string

controllers.forgejo-runner.containers.app.env[].value (3)

tcp://localhost:2376
/certs/client
0

string

controllers.forgejo-runner.containers.app.image.repository (3)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.containers.app.image.tag (3)

12.10.1@sha256:3d49075f9115054ae2485d8cea2819296a904dfd4f00017285168028615d8533

string

controllers.forgejo-runner.containers.app.securityContext.privileged (2)

true

boolean

controllers.forgejo-runner.containers.app.resources.limits.cpu (1)

1000m

string

controllers.forgejo-runner.containers.app.resources.limits.memory (1)

100Mi

string

controllers.forgejo-runner.containers.app.resources.requests.cpu (1)

10m

string

controllers.forgejo-runner.containers.app.resources.requests.memory (1)

100Mi

string

controllers.forgejo-runner.containers.daemon.env[].name (3)

DOCKER_TLS_CERTDIR

string

controllers.forgejo-runner.containers.daemon.env[].value (3)

/certs

string

controllers.forgejo-runner.containers.daemon.image.repository (3)

docker

string

controllers.forgejo-runner.containers.daemon.image.tag (3)

29.4.3-dind@sha256:685b91dca8eab7de1dce1c303dbb7a763e4082d6a60db10968adf3295fbd2495

string

controllers.forgejo-runner.containers.daemon.securityContext.privileged (3)

true

boolean

controllers.forgejo-runner.containers.daemon.resources.limits.cpu (1)

1000m

string

controllers.forgejo-runner.containers.daemon.resources.limits.memory (1)

194Mi

string

controllers.forgejo-runner.containers.daemon.resources.requests.cpu (1)

10m

string

controllers.forgejo-runner.containers.daemon.resources.requests.memory (1)

194Mi

string

controllers.forgejo-runner.initContainers.runner-register.args[] (2)

- forgejo-runner register --no-interactive --token $(RUNNER_TOKEN) --name $(RUNNER_NAME) --instance $(FORGEJO_INSTANCE_URL) --labels self-hosted:host,docker:docker://ghcr.io/catthehacker/ubuntu:act-24.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-24.04,ubuntu-24.04:docker://ghcr.io/catthehacker/ubuntu:act-24.04,renovate:docker://ghcr.io/catthehacker/ubuntu:act-24.04 ;
forgejo-runner generate-config > /data/config.yml ;
sed -i -e "s|network: .*|network: host|" /data/config.yml ;
sed -i -e "s|^  envs:$|  envs:\n    DOCKER_HOST: tcp://localhost:2376\n    DOCKER_TLS_VERIFY: 1\n    DOCKER_CERT_PATH: /certs/client|" /data/config.yml ;
sed -i -e "s|^  options:|  options: -v /certs/client:/certs/client|" /data/config.yml ;
sed -i -e "s|  valid_volumes: \[\]$|  valid_volumes:\n    - /certs/client|" /data/config.yml ;

string

controllers.forgejo-runner.initContainers.runner-register.command[] (2)

- sh
- -c

string

controllers.forgejo-runner.initContainers.runner-register.env[].name (2)

RUNNER_NAME
RUNNER_TOKEN
FORGEJO_INSTANCE_URL

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.fieldRef.fieldPath (2)

metadata.name

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.key (2)

RUNNER_TOKEN
FORGEJO_INSTANCE_URL

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.name (2)

forgejo-runner-secret
forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.runner-register.image.repository (2)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.initContainers.runner-register.image.tag (2)

12.10.1@sha256:3d49075f9115054ae2485d8cea2819296a904dfd4f00017285168028615d8533

string

controllers.forgejo-runner.initContainers.copy-k8s-plugin.command[] (1)

- sh
- -c
- cp /usr/local/bin/forgejo-runner-k8s /plugins/forgejo-runner-k8s

string

controllers.forgejo-runner.initContainers.copy-k8s-plugin.image.repository (1)

git.erwanleboucher.dev/eleboucher/runner-k8s-plugin-v2

string

controllers.forgejo-runner.initContainers.copy-k8s-plugin.image.tag (1)

sha-f7ab06b75887e5497c9f9f9bef641aafb2ae3e1c

string

controllers.forgejo-runner.initContainers.copy-k8s-plugin.securityContext.allowPrivilegeEscalation (1)

false

boolean

controllers.forgejo-runner.initContainers.copy-k8s-plugin.securityContext.capabilities.drop[] (1)

- ALL

string

controllers.forgejo-runner.initContainers.copy-k8s-plugin.securityContext.readOnlyRootFilesystem (1)

true

boolean

controllers.forgejo-runner.initContainers.register-runner.command[] (1)

- sh
- -c
- if [ -f /persistent/.runner ]; then
  echo "Runner already registered, skipping"
  exit 0
fi
echo "Registering runner..."
cd /persistent && forgejo-runner register \
  --instance https://git.cnas.dev \
  --token "$(RUNNER_TOKEN)" \
  --name k8s-runner \
  --labels "default:k8spod:/config/podspec-default.yaml" \
  --no-interactive

string

controllers.forgejo-runner.initContainers.register-runner.env[].name (1)

RUNNER_TOKEN

string

controllers.forgejo-runner.initContainers.register-runner.env[].valueFrom.secretKeyRef.key (1)

token

string

controllers.forgejo-runner.initContainers.register-runner.env[].valueFrom.secretKeyRef.name (1)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.register-runner.image.repository (1)

git.erwanleboucher.dev/eleboucher/runner

string

controllers.forgejo-runner.initContainers.register-runner.image.tag (1)

sha-63d5504927ba6b9d511c0972beaf4ff5b3705f82

string

controllers.forgejo-runner.initContainers.register.command[] (1)

- sh
- -c
- if [ ! -f /data/.runner ]; then
  echo "Registering runner...";
  forgejo-runner register --no-interactive \
    --token $(RUNNER_TOKEN) \
    --name $(RUNNER_NAME) \
    --instance $(FORGEJO_INSTANCE_URL) \
    --labels "$(LABELS)";
else
  echo "Runner already registered, skipping.";
fi

string

controllers.forgejo-runner.initContainers.register.env.FORGEJO_INSTANCE_URL (1)

https://forgejo.rnatr.com

string

controllers.forgejo-runner.initContainers.register.env.LABELS (1)

ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest

string

controllers.forgejo-runner.initContainers.register.envFrom[].secretRef.name (1)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.register.image.repository (1)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.initContainers.register.image.tag (1)

12.10.1@sha256:3d49075f9115054ae2485d8cea2819296a904dfd4f00017285168028615d8533

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].accessMode (2)

ReadWriteOnce

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].path (2)

/persistent

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].name (2)

persistent

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].size (2)

1Gi

string

persistence.config.globalMounts[].path (7)

/config

string

persistence.config.globalMounts[].readOnly (1)

true

boolean

persistence.config.globalMounts[].subPath (1)

config.yaml

string

persistence.config.type (7)

configMap

string

persistence.config.identifier (5)

config

string

persistence.config.name (2)

forgejo-runner-configmap

string

persistence.tmpfs.globalMounts[].path (6)

/data
/tmp

string

persistence.tmpfs.globalMounts[].subPath (6)

data
tmp

string

persistence.tmpfs.type (6)

emptyDir

string

persistence.runner-secret.globalMounts[].path (5)

/etc/forgejo-runner-secret

string

persistence.runner-secret.globalMounts[].readOnly (5)

true

boolean

persistence.runner-secret.name (5)

forgejo-runner-secret

string

persistence.runner-secret.type (5)

secret

string

persistence.plugin.type (4)

emptyDir

string

persistence.plugin.globalMounts[].path (3)

/plugin

string

persistence.docker-certs.globalMounts[].path (2)

/certs

string

persistence.docker-certs.type (2)

emptyDir

string

persistence.plugins.globalMounts[].path (2)

/plugins

string

persistence.plugins.type (2)

emptyDir

string

persistence.runner-data.globalMounts[].path (2)

/data

string

persistence.runner-data.type (2)

emptyDir

string

persistence.cache.globalMounts[].path (1)

/cache
/.cache

string

persistence.cache.globalMounts[].readOnly (1)

false
false

boolean

persistence.cache.globalMounts[].subPath (1)

cache
cachelocal

string

persistence.cache.type (1)

emptyDir

string

persistence.certs.type (1)

emptyDir

string

rbac.bindings.forgejo-runner.roleRef.identifier (6)

forgejo-runner

string

rbac.bindings.forgejo-runner.subjects[].identifier (6)

forgejo-runner

string

rbac.bindings.forgejo-runner.type (6)

RoleBinding

string

rbac.roles.forgejo-runner.rules[].apiGroups[] (6)

- 
- 
-

string

rbac.roles.forgejo-runner.rules[].resources[] (6)

- pods
- pods/exec
- pods/log

string

rbac.roles.forgejo-runner.rules[].verbs[] (6)

- list
- watch
- create
- get
- delete
- create
- get
- list
- watch
- get

string

rbac.roles.forgejo-runner.type (6)

Role

string

configMaps.config.data."podspec-default.yaml" (5)

containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:f7c797a4a115129ccdca814c933c85759764940223e0f31ea27bf0c052ebac87
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        memory: 2Gi
      requests:
        cpu: 100m
        memory: 256Mi
restartPolicy: Never

string

configMaps.config.data."podspec-dind.yaml" (5)

initContainers:
  - name: dind
    image: docker:29-dind
    securityContext:
      privileged: true
    restartPolicy: Always
    env:
      - name: DOCKER_TLS_CERTDIR
        value: /certs
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        memory: 4Gi
    volumeMounts:
      - name: docker-storage
        mountPath: /var/lib/docker
      - name: docker-certs
        mountPath: /certs
    readinessProbe:
      exec:
        command:
          - sh
          - -c
          - test -f /certs/client/ca.pem && test -f /certs/client/cert.pem && test -f /certs/client/key.pem
      initialDelaySeconds: 2
      periodSeconds: 1
containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
      - name: DOCKER_HOST
        value: tcp://localhost:2376
      - name: DOCKER_TLS_VERIFY
        value: "1"
      - name: DOCKER_CERT_PATH
        value: /certs/client
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:f7c797a4a115129ccdca814c933c85759764940223e0f31ea27bf0c052ebac87
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        memory: 2Gi
      requests:
        cpu: 100m
        memory: 256Mi
    volumeMounts:
      - name: docker-certs
        mountPath: /certs
        readOnly: true
volumes:
  - name: docker-storage
    emptyDir: {}
  - name: docker-certs
    emptyDir: {}
restartPolicy: Never

string

configMaps.config.data."runner.yaml" (5)

cache:
  enabled: true
  dir: /data/cache
container:
  docker_host: "-"
  workdir_parent: shared/workdir
host:
  workdir_parent: /data/act
kubernetes:
  namespace: dev
  poll_timeout: 10m
log:
  level: info
plugins:
  k8s:
    address: unix:///plugin/forgejo-runner-k8s.sock
    options:
      namespace: dev
      poll_timeout: 10m
      labels: "app.kubernetes.io/name=forgejo-runner-instance,app.kubernetes.io/instance=env-${ENV_ID},egress.home.arpa/custom-egress=true"
runner:
  capacity: 2
  file: /persistent/.runner
  labels:
    - ubuntu-latest:k8s:/config/podspec-default.yaml
    - ubuntu-24.04:k8spod:/config/podspec-default.yaml
    - default:k8s:/config/podspec-default.yaml
    - docker:k8s:/config/podspec-dind.yaml
  timeout: 3h

string

configMaps.config.suffix (5)

config

string

service.app.controller (3)

forgejo-runner

string

service.app.ports.http.port (3)

number

defaultPodOptions.automountServiceAccountToken (2)

true

boolean