forgejo-runner helm release

No introduction found. Create it?

Name	Repo	Stars	Version	Timestamp
forgejo-runner	bjw-s-labs/home-ops	868	5.3.0	a day ago
forgejo-runner	haraldkoch/kochhaus-home	180	5.3.0	2 days ago
forgejo-runner	ToaHartor/maisonneux	43	13.2.1	12 days ago

Name

Repo

Stars

Version

Timestamp

forgejo-runner

bjw-s-labs/home-ops

868

5.3.0

a day ago

forgejo-runner

haraldkoch/kochhaus-home

180

5.3.0

2 days ago

forgejo-runner

ToaHartor/maisonneux

13.2.1

12 days ago

Key	Types
controllers.forgejo-runner.annotations."reloader.stakater.com/auto" (10) `true`	string
controllers.forgejo-runner.replicas (9) `1`	number
controllers.forgejo-runner.pod.securityContext.fsGroup (8) `1000`	number
controllers.forgejo-runner.pod.securityContext.fsGroupChangePolicy (8) `OnRootMismatch`	string
controllers.forgejo-runner.pod.securityContext.runAsGroup (7) `1000`	number
controllers.forgejo-runner.pod.securityContext.runAsNonRoot (7) `true`	boolean
controllers.forgejo-runner.pod.securityContext.runAsUser (7) `1000`	number
controllers.forgejo-runner.pod.automountServiceAccountToken (5) `true`	boolean
controllers.forgejo-runner.pod.labels."app.kubernetes.io/component" (5) `forgejo-runner`	string
controllers.forgejo-runner.pod.labels."egress.home.arpa/apiserver" (1) `allow`	string
controllers.forgejo-runner.pod.labels."egress.home.arpa/gateway-external" (1) `allow`	string
controllers.forgejo-runner.pod.labels."egress.home.arpa/internet" (1) `allow`	string
controllers.forgejo-runner.pod.terminationGracePeriodSeconds (3) `300`	number
controllers.forgejo-runner.type (8) `deployment`	string
controllers.forgejo-runner.containers.runner.command[] (7) `- sh - -ec - exec /bin/forgejo-runner daemon \ --config /config/runner.yaml \ --url "http://forgejo-http:3000" \ --uuid "$(cat /etc/forgejo-runner-secret/uuid)" \ --token-url file:///etc/forgejo-runner-secret/token`	string
controllers.forgejo-runner.containers.runner.image.repository (7) `data.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.containers.runner.image.tag (7) `13.2.1`	string
controllers.forgejo-runner.containers.runner.resources.requests.cpu (7) `5m`	string
controllers.forgejo-runner.containers.runner.resources.requests.memory (7) `32Mi`	string
controllers.forgejo-runner.containers.runner.resources.limits.memory (4) `1Gi`	string
controllers.forgejo-runner.containers.runner.securityContext.allowPrivilegeEscalation (7) `false`	boolean
controllers.forgejo-runner.containers.runner.securityContext.capabilities.drop[] (7) `- ALL`	string
controllers.forgejo-runner.containers.runner.securityContext.readOnlyRootFilesystem (7) `true`	boolean
controllers.forgejo-runner.containers.runner.env.TZ (1) `Europe/London`	string
controllers.forgejo-runner.containers.k8s-plugin.args[] (4) `- --listen - unix:///plugin/forgejo-runner-k8s.sock`	string
controllers.forgejo-runner.containers.k8s-plugin.image.repository (4) `git.erwanleboucher.dev/eleboucher/runner-k8s-plugin`	string
controllers.forgejo-runner.containers.k8s-plugin.image.tag (4) `13.2.1`	string
controllers.forgejo-runner.containers.k8s-plugin.image.pullPolicy (1) `Always`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.requests.cpu (4) `5m`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.requests.memory (4) `32Mi`	string
controllers.forgejo-runner.containers.k8s-plugin.resources.limits.memory (2) `128Mi`	string
controllers.forgejo-runner.containers.k8s-plugin.securityContext.allowPrivilegeEscalation (4) `false`	boolean
controllers.forgejo-runner.containers.k8s-plugin.securityContext.capabilities.drop[] (4) `- ALL`	string
controllers.forgejo-runner.containers.k8s-plugin.securityContext.readOnlyRootFilesystem (4) `true`	boolean
controllers.forgejo-runner.containers.k8s-plugin.env.TZ (1) `Europe/London`	string
controllers.forgejo-runner.containers.app.command[] (3) `- sh - -c - while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner --config /data/config.yml daemon`	string
controllers.forgejo-runner.containers.app.env[].name (3) `DOCKER_HOST DOCKER_CERT_PATH DOCKER_TLS_VERIFY`	string
controllers.forgejo-runner.containers.app.env[].value (3) `tcp://localhost:2376 /certs/client 0`	string
controllers.forgejo-runner.containers.app.image.repository (3) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.containers.app.image.tag (3) `12.10.2`	string
controllers.forgejo-runner.containers.app.securityContext.privileged (2) `true`	boolean
controllers.forgejo-runner.containers.app.resources.limits.cpu (1) `1000m`	string
controllers.forgejo-runner.containers.app.resources.limits.memory (1) `200Mi`	string
controllers.forgejo-runner.containers.app.resources.requests.cpu (1) `10m`	string
controllers.forgejo-runner.containers.app.resources.requests.memory (1) `100Mi`	string
controllers.forgejo-runner.containers.daemon.env[].name (3) `DOCKER_TLS_CERTDIR`	string
controllers.forgejo-runner.containers.daemon.env[].value (3) `/certs`	string
controllers.forgejo-runner.containers.daemon.image.repository (3) `docker`	string
controllers.forgejo-runner.containers.daemon.image.tag (3) `29.5.3-dind`	string
controllers.forgejo-runner.containers.daemon.securityContext.privileged (3) `true`	boolean
controllers.forgejo-runner.containers.daemon.resources.limits.cpu (1) `1000m`	string
controllers.forgejo-runner.containers.daemon.resources.limits.memory (1) `512Mi`	string
controllers.forgejo-runner.containers.daemon.resources.requests.cpu (1) `10m`	string
controllers.forgejo-runner.containers.daemon.resources.requests.memory (1) `194Mi`	string
controllers.forgejo-runner.initContainers.k8s-plugin.args[] (3) `- --listen - unix:///plugin/forgejo-runner-k8s.sock`	string
controllers.forgejo-runner.initContainers.k8s-plugin.image.repository (3) `registry.erwanleboucher.dev/eleboucher/runner-k8s-plugin`	string
controllers.forgejo-runner.initContainers.k8s-plugin.image.tag (3) `13.2.1`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.limits.memory (3) `128Mi`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.cpu (3) `5m`	string
controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.memory (3) `32Mi`	string
controllers.forgejo-runner.initContainers.k8s-plugin.restartPolicy (3) `Always`	string
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.allowPrivilegeEscalation (3) `false`	boolean
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.capabilities.drop[] (3) `- ALL`	string
controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.readOnlyRootFilesystem (3) `true`	boolean
controllers.forgejo-runner.initContainers.runner-register.args[] (2) - forgejo-runner register --no-interactive --token $(RUNNER_TOKEN) --name $(RUNNER_NAME) --instance $(FORGEJO_INSTANCE_URL) --labels self-hosted:host,docker:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04,renovate:docker://ghcr.io/catthehacker/ubuntu:act-22.04 ; forgejo-runner generate-config > /data/config.yml ; sed -i -e "s\|network: .*\|network: host\|" /data/config.yml ; sed -i -e "s\|^ envs:$\| envs:\n DOCKER_HOST: tcp://localhost:2376\n DOCKER_TLS_VERIFY: 1\n DOCKER_CERT_PATH: /certs/client\|" /data/config.yml ; sed -i -e "s\|^ options:\| options: -v /certs/client:/certs/client\|" /data/config.yml ; sed -i -e "s\| valid_volumes: \[\]$\| valid_volumes:\n - /certs/client\|" /data/config.yml ;	string
controllers.forgejo-runner.initContainers.runner-register.command[] (2) `- sh - -c`	string
controllers.forgejo-runner.initContainers.runner-register.env[].name (2) `RUNNER_NAME RUNNER_TOKEN FORGEJO_INSTANCE_URL`	string
controllers.forgejo-runner.initContainers.runner-register.env[].value (2) `http://forgejo-http.code.svc.cluster.local:3000`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.fieldRef.fieldPath (2) `metadata.name`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.key (2) `RUNNER_TOKEN`	string
controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.name (2) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.runner-register.image.repository (2) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.initContainers.runner-register.image.tag (2) `12.10.2`	string
controllers.forgejo-runner.initContainers.register.command[] (1) `- sh - -c - # if [ ! -f /data/.runner ]; then echo "Registering runner..."; forgejo-runner register --no-interactive \ --token $(RUNNER_TOKEN) \ --name $(RUNNER_NAME) \ --instance $(FORGEJO_INSTANCE_URL) \ --labels "$(LABELS)"; # else # echo "Runner already registered, skipping."; # fi`	string
controllers.forgejo-runner.initContainers.register.env.FORGEJO_INSTANCE_URL (1) `http://forgejo-http.default.svc.cluster.local:3000`	string
controllers.forgejo-runner.initContainers.register.env.LABELS (1) `ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest`	string
controllers.forgejo-runner.initContainers.register.envFrom[].secretRef.name (1) `forgejo-runner-secret`	string
controllers.forgejo-runner.initContainers.register.image.repository (1) `code.forgejo.org/forgejo/runner`	string
controllers.forgejo-runner.initContainers.register.image.tag (1) `13.2.1@sha256:568cea8c15ddc01fc8f330124892f572af7db37fa28344a2c1914405793bf61d`	string
controllers.forgejo-runner.strategy (2) `RollingUpdate`	string
controllers.forgejo-runner.serviceAccount.identifier (1) `forgejo-runner`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].accessMode (1) `ReadWriteOnce`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].path (1) `/data`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].name (1) `data`	string
controllers.forgejo-runner.statefulset.volumeClaimTemplates[].size (1) `1Gi`	string
controllers.main.annotations."reloader.stakater.com/auto" (2) `true`	string
controllers.main.containers.daemon.args[] (2) `- --default-address-pool - base=10.200.0.0/16,size=24`	string
controllers.main.containers.daemon.env[].name (2) `DOCKER_TLS_CERTDIR`	string
controllers.main.containers.daemon.env[].value (2) `/certs`	string
controllers.main.containers.daemon.image.repository (2) `mirror.gcr.io/docker`	string
controllers.main.containers.daemon.image.tag (2) `29.9.3-dind`	string
controllers.main.containers.daemon.resources.limits.ephemeral-storage (2) `500Mi`	string
controllers.main.containers.daemon.resources.limits.memory (2) `4Gi`	string
controllers.main.containers.daemon.resources.requests.cpu (2) `10m`	string
controllers.main.containers.daemon.resources.requests.ephemeral-storage (2) `200Mi`	string
controllers.main.containers.daemon.resources.requests.memory (2) `512Mi`	string
controllers.main.containers.daemon.securityContext.privileged (2) `true`	boolean
controllers.main.containers.daemon.securityContext.runAsUser (2) `0`	number
controllers.main.containers.main.command[] (2) `- sh - -c - until [ -f /certs/client/cert.pem ] && nc -z localhost 2376; do echo "waiting for docker daemon..." sleep 2 done exec forgejo-runner daemon --config /data/runner-config.yml`	string
controllers.main.containers.main.env[].name (2) `DOCKER_HOST DOCKER_CERT_PATH DOCKER_TLS_VERIFY`	string
controllers.main.containers.main.env[].value (2) `tcp://localhost:2376 /certs/client 1`	string
controllers.main.containers.main.image.pullPolicy (2) `IfNotPresent`	string
controllers.main.containers.main.image.repository (2) `code.forgejo.org/forgejo/runner`	string
controllers.main.containers.main.image.tag (2) `13.2.1`	string
controllers.main.containers.main.resources.limits.ephemeral-storage (2) `500Mi`	string
controllers.main.containers.main.resources.limits.memory (2) `1Gi`	string
controllers.main.containers.main.resources.requests.cpu (2) `10m`	string
controllers.main.containers.main.resources.requests.ephemeral-storage (2) `200Mi`	string
controllers.main.containers.main.resources.requests.memory (2) `100Mi`	string
controllers.main.containers.main.securityContext.runAsGroup (2) `1000`	number
controllers.main.containers.main.securityContext.runAsUser (2) `1000`	number
controllers.main.containers.prune.command[] (2) `- sh - -c - until docker info >/dev/null 2>&1; do sleep 10; done last_full="" while true; do sleep 21600 docker image prune -f docker container prune -f --filter until=24h docker builder prune -af --filter until=168h today=$(date +%Y-%m-%d) if [ "$(date +%u)" = 7 ] && [ "$today" != "$last_full" ]; then docker image prune -af && docker volume prune -af && last_full=$today fi docker system df done`	string
controllers.main.containers.prune.env[].name (2) `DOCKER_HOST DOCKER_CERT_PATH DOCKER_TLS_VERIFY`	string
controllers.main.containers.prune.env[].value (2) `tcp://localhost:2376 /certs/client 1`	string
controllers.main.containers.prune.image.repository (2) `mirror.gcr.io/docker`	string
controllers.main.containers.prune.image.tag (2) `29.9.3-cli`	string
controllers.main.containers.prune.resources.limits.ephemeral-storage (2) `50Mi`	string
controllers.main.containers.prune.resources.limits.memory (2) `64Mi`	string
controllers.main.containers.prune.resources.requests.cpu (2) `5m`	string
controllers.main.containers.prune.resources.requests.ephemeral-storage (2) `10Mi`	string
controllers.main.containers.prune.resources.requests.memory (2) `16Mi`	string
controllers.main.containers.prune.securityContext.allowPrivilegeEscalation (2) `false`	boolean
controllers.main.containers.prune.securityContext.capabilities.drop[] (2) `- ALL`	string
controllers.main.containers.prune.securityContext.readOnlyRootFilesystem (2) `true`	boolean
controllers.main.containers.prune.securityContext.runAsGroup (2) `1000`	number
controllers.main.containers.prune.securityContext.runAsUser (2) `1000`	number
controllers.main.initContainers.config.command[] (2) `- sh - -c - set -e umask 077 cp /config/config.yaml /data/runner-config.yml cat >> /data/runner-config.yml <<EOF server: connections: forgejo: url: "${FORGEJO_INSTANCE_URL}" uuid: "${RUNNER_UUID}" token: "${RUNNER_TOKEN}" EOF echo "Wrote /data/runner-config.yml for ${FORGEJO_INSTANCE_URL}"`	string
controllers.main.initContainers.config.env[].name (2) `FORGEJO_INSTANCE_URL RUNNER_UUID RUNNER_TOKEN`	string
controllers.main.initContainers.config.env[].value (2) `http://forgejo-http.dev.svc.cluster.local:3000`	string
controllers.main.initContainers.config.env[].valueFrom.secretKeyRef.key (2) `UUID TOKEN`	string
controllers.main.initContainers.config.env[].valueFrom.secretKeyRef.name (2) `forgejo-runner forgejo-runner`	string
controllers.main.initContainers.config.image.pullPolicy (2) `IfNotPresent`	string
controllers.main.initContainers.config.image.repository (2) `code.forgejo.org/forgejo/runner`	string
controllers.main.initContainers.config.image.tag (2) `13.2.1`	string
controllers.main.initContainers.config.securityContext.runAsGroup (2) `1000`	number
controllers.main.initContainers.config.securityContext.runAsUser (2) `1000`	number
controllers.main.replicas (2) `1`	number
controllers.main.type (2) `statefulset`	string
persistence.config.type (10) `configMap`	string
persistence.config.globalMounts[].path (8) `/config`	string
persistence.config.globalMounts[].readOnly (1) `true`	boolean
persistence.config.globalMounts[].subPath (1) `config.yaml`	string
persistence.config.identifier (5) `config`	string
persistence.config.name (5) `forgejo-runner-configmap`	string
persistence.config.advancedMounts.main.config[].path (2) `/config`	string
persistence.config.enabled (2) `true`	boolean
persistence.plugin.type (7) `emptyDir`	string
persistence.plugin.globalMounts[].path (5) `/plugin`	string
persistence.runner-secret.name (7) `forgejo-runner-secret`	string
persistence.runner-secret.type (7) `secret`	string
persistence.runner-secret.globalMounts[].path (5) `/etc/forgejo-runner-secret`	string
persistence.runner-secret.globalMounts[].readOnly (5) `true`	boolean
persistence.runner-secret.advancedMounts.forgejo-runner.runner[].path (2) `/etc/forgejo-runner-secret`	string
persistence.runner-secret.advancedMounts.forgejo-runner.runner[].readOnly (2) `true`	boolean
persistence.tmpfs.globalMounts[].path (6) `/data /tmp`	string
persistence.tmpfs.globalMounts[].subPath (6) `data tmp`	string
persistence.tmpfs.type (6) `emptyDir`	string
persistence.docker-certs.globalMounts[].path (4) `/certs`	string
persistence.docker-certs.type (4) `emptyDir`	string
persistence.docker-certs.enabled (2) `true`	boolean
persistence.docker-certs.sizeLimit (2) `100Mi`	string
persistence.daemon-config.advancedMounts.main.daemon[].path (2) `/etc/docker/daemon.json`	string
persistence.daemon-config.advancedMounts.main.daemon[].readOnly (2) `true`	boolean
persistence.daemon-config.advancedMounts.main.daemon[].subPath (2) `daemon.json`	string
persistence.daemon-config.enabled (2) `true`	boolean
persistence.daemon-config.name (2) `forgejo-runner-daemon-config`	string
persistence.daemon-config.type (2) `configMap`	string
persistence.data.globalMounts[].path (2) `/data`	string
persistence.data.accessMode (1) `ReadWriteOnce`	string
persistence.data.existingClaim (1) `forgejo-runner-data`	string
persistence.data.size (1) `50Gi`	string
persistence.data.storageClass (1) `miroir-local-slow`	string
persistence.data.type (1) `persistentVolumeClaim`	string
persistence.docker-data.accessMode (2) `ReadWriteOnce`	string
persistence.docker-data.advancedMounts.main.daemon[].path (2) `/var/lib/docker`	string
persistence.docker-data.advancedMounts.main.main[].path (2) `/var/lib/docker`	string
persistence.docker-data.enabled (2) `true`	boolean
persistence.docker-data.size (2) `30Gi`	string
persistence.docker-data.storageClass (2) `local-path`	string
persistence.registry-mirrors.advancedMounts.main.daemon[].path (2) `/etc/docker/certs.d`	string
persistence.registry-mirrors.advancedMounts.main.daemon[].readOnly (2) `true`	boolean
persistence.registry-mirrors.enabled (2) `true`	boolean
persistence.registry-mirrors.items[].key (2) `registry-docker.io.toml registry-ghcr.io.toml registry-quay.io.toml registry-mirror.gcr.io.toml`	string
persistence.registry-mirrors.items[].path (2) `docker.io/hosts.toml ghcr.io/hosts.toml quay.io/hosts.toml mirror.gcr.io/hosts.toml`	string
persistence.registry-mirrors.name (2) `forgejo-runner-registry-mirrors`	string
persistence.registry-mirrors.type (2) `configMap`	string
persistence.runner-data.accessMode (2) `ReadWriteOnce`	string
persistence.runner-data.advancedMounts.main.config[].path (2) `/data`	string
persistence.runner-data.advancedMounts.main.main[].path (2) `/data`	string
persistence.runner-data.enabled (2) `true`	boolean
persistence.runner-data.globalMounts[].path (2) `/data`	string
persistence.runner-data.size (2) `10Gi`	string
persistence.runner-data.storageClass (2) `local-path`	string
persistence.runner-data.type (2) `emptyDir`	string
persistence.cache.globalMounts[].path (1) `/cache /.cache`	string
persistence.cache.globalMounts[].readOnly (1) `false false`	boolean
persistence.cache.globalMounts[].subPath (1) `cache cachelocal`	string
persistence.cache.type (1) `emptyDir`	string
persistence.certs.type (1) `emptyDir`	string
persistence.persistent.globalMounts[].path (1) `/persistent`	string
persistence.persistent.type (1) `emptyDir`	string
persistence.tmp.globalMounts[].path (1) `/tmp`	string
persistence.tmp.type (1) `emptyDir`	string
forgejo.existingSecret (6) `forgejo-runner-secret`	string
forgejo.url (6) `http://forgejo-http.default.svc.cluster.local:3000`	string
image.repository (6) `data.forgejo.org/forgejo/runner`	string
image.tag (6) `13.2.1`	string
image.digest (3) `sha256:c4af85fd9f0dd03788676a534781a87c71aa2c6a37737143e017eb94d4312952`	string
plugin.image.repository (6) `registry.erwanleboucher.dev/eleboucher/runner-k8s-plugin`	string
plugin.image.digest (3) `sha256:9ae8a21340cde415b828adc95bc4f1345bed67c21a0e3be26032d367a64b20db`	string
plugin.image.tag (3) `13.2.1`	string
plugin.resources.limits.memory (2) `512Mi`	string
plugin.resources.requests.cpu (2) `5m`	string
plugin.resources.requests.memory (2) `64Mi`	string
podLabels."app.kubernetes.io/component" (6) `forgejo-runner`	string
podSpecs."podspec-default.yaml" (6) `containers: - env: - name: DEBIAN_FRONTEND value: noninteractive image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:fea688b875acdce4e7c786d117b30c1b0203271b23e77d80c306b373d9f5422f imagePullPolicy: IfNotPresent name: main resources: requests: cpu: 100m memory: 1Gi limits: cpu: 500m memory: 4Gi restartPolicy: Never`	string
podSpecs."podspec-dind.yaml" (6) initContainers: - name: dind image: docker:29-dind args: - --ipv6 - --fixed-cidr-v6=fd00:d1d::/64 securityContext: privileged: true restartPolicy: Always env: - name: DOCKER_TLS_CERTDIR value: /certs resources: requests: cpu: 100m memory: 1Gi limits: cpu: 500m memory: 8Gi volumeMounts: - name: docker-storage mountPath: /var/lib/docker - name: docker-certs mountPath: /certs startupProbe: exec: command: - sh - -c - docker --tlsverify --tlscacert=/certs/client/ca.pem --tlscert=/certs/client/cert.pem --tlskey=/certs/client/key.pem -H tcp://localhost:2376 info initialDelaySeconds: 5 periodSeconds: 1 failureThreshold: 30 containers: - env: - name: DEBIAN_FRONTEND value: noninteractive - name: DOCKER_HOST value: tcp://localhost:2376 - name: DOCKER_TLS_VERIFY value: "1" - name: DOCKER_CERT_PATH value: /certs/client image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:fea688b875acdce4e7c786d117b30c1b0203271b23e77d80c306b373d9f5422f imagePullPolicy: IfNotPresent name: main resources: requests: cpu: 100m memory: 1Gi limits: cpu: 500m memory: 4Gi volumeMounts: - name: docker-certs mountPath: /certs readOnly: true volumes: - name: docker-storage emptyDir: {} - name: docker-certs emptyDir: {} restartPolicy: Never	string
podSpecs."podspec-heavy.yaml" (3) containers: - env: - name: DEBIAN_FRONTEND value: noninteractive image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:fea688b875acdce4e7c786d117b30c1b0203271b23e77d80c306b373d9f5422f imagePullPolicy: IfNotPresent name: main resources: # Burstable on purpose: at 36Gi request=limit this held # oom_score_adj -997 and the kernel killed postgres instead of it. requests: cpu: "4" memory: 8Gi ephemeral-storage: 40Gi limits: cpu: "12" memory: 24Gi ephemeral-storage: 60Gi volumeMounts: # $BUILDDIR: the plugin's own "shared" workdir is capped at 10Gi. - name: build mountPath: /build volumes: - name: build emptyDir: sizeLimit: 40Gi restartPolicy: Never	string
podSpecs."podspec-buildkit.yaml" (1) containers: - env: - name: BUILDKIT_HOST value: tcp://buildkit.forgejo.svc.cluster.local:1234 - name: DEBIAN_FRONTEND value: noninteractive image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:8b7a25c7b3235c27e97df1cbb8411c1d12d2676e739265b5fbb66bb55f72dbf6 imagePullPolicy: IfNotPresent name: main resources: limits: cpu: "1" memory: 1Gi requests: cpu: 100m memory: 128Mi volumeMounts: - mountPath: /buildkit-certs name: buildkit-certs readOnly: true volumes: - name: buildkit-certs secret: secretName: buildkit-client-cert restartPolicy: Never	string
podSpecs."podspec-talos.yaml" (1) containers: - env: - name: DEBIAN_FRONTEND value: noninteractive - name: NODE valueFrom: fieldRef: fieldPath: status.hostIP image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:8b7a25c7b3235c27e97df1cbb8411c1d12d2676e739265b5fbb66bb55f72dbf6 imagePullPolicy: IfNotPresent name: main resources: limits: cpu: "2" memory: 2Gi requests: cpu: 500m memory: 256Mi volumeMounts: - mountPath: /var/run/secrets/talos.dev name: talos readOnly: true volumes: - name: talos secret: secretName: forgejo-runner-talos restartPolicy: Never	string
rbac.bindings.forgejo-runner.roleRef.identifier (6) `forgejo-runner`	string
rbac.bindings.forgejo-runner.subjects[].identifier (6) `forgejo-runner`	string
rbac.bindings.forgejo-runner.type (6) `RoleBinding`	string
rbac.roles.forgejo-runner.rules[].apiGroups[] (6) `- batch - - -`	string
rbac.roles.forgejo-runner.rules[].resources[] (6) `- jobs - pods - pods/exec - pods/log`	string
rbac.roles.forgejo-runner.rules[].verbs[] (6) `- create - get - list - watch - delete - list - watch - get - create - get - list - watch - get`	string
rbac.roles.forgejo-runner.type (6) `Role`	string
runnerConfig (6) cache: enabled: true dir: /data/cache port: 8088 proxy_port: 8089 container: docker_host: "-" workdir_parent: shared/workdir host: workdir_parent: /data/act log: level: info plugins: k8s: address: "unix:///plugin/forgejo-runner-k8s.sock" options: namespace: forgejo poll_timeout: 10m runner: capacity: 6 labels: - ubuntu-latest:k8s:///config/podspec-default.yaml - ubuntu-24.04:k8s:///config/podspec-default.yaml - default:k8s:///config/podspec-default.yaml - buildkit:k8s:///config/podspec-buildkit.yaml - docker:k8s:///config/podspec-dind.yaml - multiarch:k8s:///config/podspec-dind.yaml - talos:k8s:///config/podspec-talos.yaml timeout: 3h shutdown_timeout: 3m	string
configMaps.config.data."podspec-default.yaml" (5) `automountServiceAccountToken: false containers: - env: - name: DEBIAN_FRONTEND value: noninteractive image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-26.04@sha256:8fab1550745c46d892027c5d204be026cc4832b1530c0c15ebee4b3ea8adb90b imagePullPolicy: IfNotPresent name: main resources: limits: memory: 2Gi requests: cpu: 100m memory: 256Mi restartPolicy: Never`	string
configMaps.config.data."podspec-dind.yaml" (5) automountServiceAccountToken: false initContainers: - name: dind image: docker:29-dind securityContext: privileged: true restartPolicy: Always env: - name: DOCKER_TLS_CERTDIR value: /certs resources: requests: cpu: 100m memory: 256Mi limits: memory: 4Gi volumeMounts: - name: docker-storage mountPath: /var/lib/docker - name: docker-certs mountPath: /certs startupProbe: exec: command: - sh - -c - docker --tlsverify --tlscacert=/certs/client/ca.pem --tlscert=/certs/client/cert.pem --tlskey=/certs/client/key.pem -H tcp://localhost:2376 info initialDelaySeconds: 5 periodSeconds: 1 failureThreshold: 30 containers: - env: - name: DEBIAN_FRONTEND value: noninteractive - name: DOCKER_HOST value: tcp://localhost:2376 - name: DOCKER_TLS_VERIFY value: "1" - name: DOCKER_CERT_PATH value: /certs/client image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-26.04@sha256:8fab1550745c46d892027c5d204be026cc4832b1530c0c15ebee4b3ea8adb90b imagePullPolicy: IfNotPresent name: main resources: limits: memory: 2Gi requests: cpu: 100m memory: 256Mi volumeMounts: - name: docker-certs mountPath: /certs readOnly: true volumes: - name: docker-storage emptyDir: {} - name: docker-certs emptyDir: {} restartPolicy: Never	string
configMaps.config.data."runner.yaml" (5) cache: enabled: true dir: /data/cache port: 8088 proxy_port: 8089 container: docker_host: "-" workdir_parent: shared/workdir host: workdir_parent: /data/act log: level: info plugins: k8s: address: unix:///plugin/forgejo-runner-k8s.sock options: namespace: forgejo-runner poll_timeout: 10m labels: "app.kubernetes.io/name=forgejo-runner-instance,app.kubernetes.io/instance=env-${ENV_ID},egress.policy.home.arpa/block-all=true" resources: \| requests: cpu: 100m memory: 256Mi limits: memory: 1Gi runner: capacity: 4 labels: - ubuntu-latest:k8s:///config/podspec-default.yaml - ubuntu-26.04:k8s:///config/podspec-default.yaml - default:k8s:///config/podspec-default.yaml - docker:k8s:///config/podspec-dind.yaml timeout: 3h shutdown_timeout: 3m	string
configMaps.config.suffix (5) `config`	string
service.app.controller (3) `forgejo-runner`	string
service.app.ports.http.port (3) `45315`	number
service.main.controller (2) `main`	string
service.main.enabled (2) `false`	boolean
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (2) `kubernetes.io/hostname`	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (2) `NotIn`	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (2) `- muspelheim`	string
defaultPodOptions.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (2) `100`	number
defaultPodOptions.automountServiceAccountToken (2) `true`	boolean
defaultPodOptions.securityContext.fsGroup (2) `1000`	number
defaultPodOptions.securityContext.fsGroupChangePolicy (2) `OnRootMismatch`	string
global.createDefaultServiceAccount (2) `false`	boolean

Key

Types

controllers.forgejo-runner.annotations."reloader.stakater.com/auto" (10)

true

string

controllers.forgejo-runner.replicas (9)

number

controllers.forgejo-runner.pod.securityContext.fsGroup (8)

number

controllers.forgejo-runner.pod.securityContext.fsGroupChangePolicy (8)

OnRootMismatch

string

controllers.forgejo-runner.pod.securityContext.runAsGroup (7)

number

controllers.forgejo-runner.pod.securityContext.runAsNonRoot (7)

true

boolean

controllers.forgejo-runner.pod.securityContext.runAsUser (7)

number

controllers.forgejo-runner.pod.automountServiceAccountToken (5)

true

boolean

controllers.forgejo-runner.pod.labels."app.kubernetes.io/component" (5)

forgejo-runner

string

controllers.forgejo-runner.pod.labels."egress.home.arpa/apiserver" (1)

allow

string

controllers.forgejo-runner.pod.labels."egress.home.arpa/gateway-external" (1)

allow

string

controllers.forgejo-runner.pod.labels."egress.home.arpa/internet" (1)

allow

string

controllers.forgejo-runner.pod.terminationGracePeriodSeconds (3)

number

controllers.forgejo-runner.type (8)

deployment

string

controllers.forgejo-runner.containers.runner.command[] (7)

- sh
- -ec
- exec /bin/forgejo-runner daemon \
  --config /config/runner.yaml \
  --url "http://forgejo-http:3000" \
  --uuid "$(cat /etc/forgejo-runner-secret/uuid)" \
  --token-url file:///etc/forgejo-runner-secret/token

string

controllers.forgejo-runner.containers.runner.image.repository (7)

data.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.containers.runner.image.tag (7)

13.2.1

string

controllers.forgejo-runner.containers.runner.resources.requests.cpu (7)

5m

string

controllers.forgejo-runner.containers.runner.resources.requests.memory (7)

32Mi

string

controllers.forgejo-runner.containers.runner.resources.limits.memory (4)

1Gi

string

controllers.forgejo-runner.containers.runner.securityContext.allowPrivilegeEscalation (7)

false

boolean

controllers.forgejo-runner.containers.runner.securityContext.capabilities.drop[] (7)

- ALL

string

controllers.forgejo-runner.containers.runner.securityContext.readOnlyRootFilesystem (7)

true

boolean

controllers.forgejo-runner.containers.runner.env.TZ (1)

Europe/London

string

controllers.forgejo-runner.containers.k8s-plugin.args[] (4)

- --listen
- unix:///plugin/forgejo-runner-k8s.sock

string

controllers.forgejo-runner.containers.k8s-plugin.image.repository (4)

git.erwanleboucher.dev/eleboucher/runner-k8s-plugin

string

controllers.forgejo-runner.containers.k8s-plugin.image.tag (4)

13.2.1

string

controllers.forgejo-runner.containers.k8s-plugin.image.pullPolicy (1)

Always

string

controllers.forgejo-runner.containers.k8s-plugin.resources.requests.cpu (4)

5m

string

controllers.forgejo-runner.containers.k8s-plugin.resources.requests.memory (4)

32Mi

string

controllers.forgejo-runner.containers.k8s-plugin.resources.limits.memory (2)

128Mi

string

controllers.forgejo-runner.containers.k8s-plugin.securityContext.allowPrivilegeEscalation (4)

false

boolean

controllers.forgejo-runner.containers.k8s-plugin.securityContext.capabilities.drop[] (4)

- ALL

string

controllers.forgejo-runner.containers.k8s-plugin.securityContext.readOnlyRootFilesystem (4)

true

boolean

controllers.forgejo-runner.containers.k8s-plugin.env.TZ (1)

Europe/London

string

controllers.forgejo-runner.containers.app.command[] (3)

- sh
- -c
- while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner --config /data/config.yml daemon

string

controllers.forgejo-runner.containers.app.env[].name (3)

DOCKER_HOST
DOCKER_CERT_PATH
DOCKER_TLS_VERIFY

string

controllers.forgejo-runner.containers.app.env[].value (3)

tcp://localhost:2376
/certs/client
0

string

controllers.forgejo-runner.containers.app.image.repository (3)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.containers.app.image.tag (3)

12.10.2

string

controllers.forgejo-runner.containers.app.securityContext.privileged (2)

true

boolean

controllers.forgejo-runner.containers.app.resources.limits.cpu (1)

1000m

string

controllers.forgejo-runner.containers.app.resources.limits.memory (1)

200Mi

string

controllers.forgejo-runner.containers.app.resources.requests.cpu (1)

10m

string

controllers.forgejo-runner.containers.app.resources.requests.memory (1)

100Mi

string

controllers.forgejo-runner.containers.daemon.env[].name (3)

DOCKER_TLS_CERTDIR

string

controllers.forgejo-runner.containers.daemon.env[].value (3)

/certs

string

controllers.forgejo-runner.containers.daemon.image.repository (3)

docker

string

controllers.forgejo-runner.containers.daemon.image.tag (3)

29.5.3-dind

string

controllers.forgejo-runner.containers.daemon.securityContext.privileged (3)

true

boolean

controllers.forgejo-runner.containers.daemon.resources.limits.cpu (1)

1000m

string

controllers.forgejo-runner.containers.daemon.resources.limits.memory (1)

512Mi

string

controllers.forgejo-runner.containers.daemon.resources.requests.cpu (1)

10m

string

controllers.forgejo-runner.containers.daemon.resources.requests.memory (1)

194Mi

string

controllers.forgejo-runner.initContainers.k8s-plugin.args[] (3)

- --listen
- unix:///plugin/forgejo-runner-k8s.sock

string

controllers.forgejo-runner.initContainers.k8s-plugin.image.repository (3)

registry.erwanleboucher.dev/eleboucher/runner-k8s-plugin

string

controllers.forgejo-runner.initContainers.k8s-plugin.image.tag (3)

13.2.1

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.limits.memory (3)

128Mi

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.cpu (3)

5m

string

controllers.forgejo-runner.initContainers.k8s-plugin.resources.requests.memory (3)

32Mi

string

controllers.forgejo-runner.initContainers.k8s-plugin.restartPolicy (3)

Always

string

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.allowPrivilegeEscalation (3)

false

boolean

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.capabilities.drop[] (3)

- ALL

string

controllers.forgejo-runner.initContainers.k8s-plugin.securityContext.readOnlyRootFilesystem (3)

true

boolean

controllers.forgejo-runner.initContainers.runner-register.args[] (2)

- forgejo-runner register --no-interactive --token $(RUNNER_TOKEN) --name $(RUNNER_NAME) --instance $(FORGEJO_INSTANCE_URL) --labels self-hosted:host,docker:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-22.04,ubuntu-22.04:docker://ghcr.io/catthehacker/ubuntu:act-22.04,renovate:docker://ghcr.io/catthehacker/ubuntu:act-22.04 ;
forgejo-runner generate-config > /data/config.yml ;
sed -i -e "s|network: .*|network: host|" /data/config.yml ;
sed -i -e "s|^  envs:$|  envs:\n    DOCKER_HOST: tcp://localhost:2376\n    DOCKER_TLS_VERIFY: 1\n    DOCKER_CERT_PATH: /certs/client|" /data/config.yml ;
sed -i -e "s|^  options:|  options: -v /certs/client:/certs/client|" /data/config.yml ;
sed -i -e "s|  valid_volumes: \[\]$|  valid_volumes:\n    - /certs/client|" /data/config.yml ;

string

controllers.forgejo-runner.initContainers.runner-register.command[] (2)

- sh
- -c

string

controllers.forgejo-runner.initContainers.runner-register.env[].name (2)

RUNNER_NAME
RUNNER_TOKEN
FORGEJO_INSTANCE_URL

string

controllers.forgejo-runner.initContainers.runner-register.env[].value (2)

http://forgejo-http.code.svc.cluster.local:3000

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.fieldRef.fieldPath (2)

metadata.name

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.key (2)

RUNNER_TOKEN

string

controllers.forgejo-runner.initContainers.runner-register.env[].valueFrom.secretKeyRef.name (2)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.runner-register.image.repository (2)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.initContainers.runner-register.image.tag (2)

12.10.2

string

controllers.forgejo-runner.initContainers.register.command[] (1)

- sh
- -c
- # if [ ! -f /data/.runner ]; then
  echo "Registering runner...";
  forgejo-runner register --no-interactive \
    --token $(RUNNER_TOKEN) \
    --name $(RUNNER_NAME) \
    --instance $(FORGEJO_INSTANCE_URL) \
    --labels "$(LABELS)";
# else #   echo "Runner already registered, skipping."; # fi

string

controllers.forgejo-runner.initContainers.register.env.FORGEJO_INSTANCE_URL (1)

http://forgejo-http.default.svc.cluster.local:3000

string

controllers.forgejo-runner.initContainers.register.env.LABELS (1)

ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest

string

controllers.forgejo-runner.initContainers.register.envFrom[].secretRef.name (1)

forgejo-runner-secret

string

controllers.forgejo-runner.initContainers.register.image.repository (1)

code.forgejo.org/forgejo/runner

string

controllers.forgejo-runner.initContainers.register.image.tag (1)

13.2.1@sha256:568cea8c15ddc01fc8f330124892f572af7db37fa28344a2c1914405793bf61d

string

controllers.forgejo-runner.strategy (2)

RollingUpdate

string

controllers.forgejo-runner.serviceAccount.identifier (1)

forgejo-runner

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].accessMode (1)

ReadWriteOnce

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].globalMounts[].path (1)

/data

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].name (1)

data

string

controllers.forgejo-runner.statefulset.volumeClaimTemplates[].size (1)

1Gi

string

controllers.main.annotations."reloader.stakater.com/auto" (2)

true

string

controllers.main.containers.daemon.args[] (2)

- --default-address-pool
- base=10.200.0.0/16,size=24

string

controllers.main.containers.daemon.env[].name (2)

DOCKER_TLS_CERTDIR

string

controllers.main.containers.daemon.env[].value (2)

/certs

string

controllers.main.containers.daemon.image.repository (2)

mirror.gcr.io/docker

string

controllers.main.containers.daemon.image.tag (2)

29.9.3-dind

string

controllers.main.containers.daemon.resources.limits.ephemeral-storage (2)

500Mi

string

controllers.main.containers.daemon.resources.limits.memory (2)

4Gi

string

controllers.main.containers.daemon.resources.requests.cpu (2)

10m

string

controllers.main.containers.daemon.resources.requests.ephemeral-storage (2)

200Mi

string

controllers.main.containers.daemon.resources.requests.memory (2)

512Mi

string

controllers.main.containers.daemon.securityContext.privileged (2)

true

boolean

controllers.main.containers.daemon.securityContext.runAsUser (2)

number

controllers.main.containers.main.command[] (2)

- sh
- -c
- until [ -f /certs/client/cert.pem ] && nc -z localhost 2376; do
  echo "waiting for docker daemon..."
  sleep 2
done
exec forgejo-runner daemon --config /data/runner-config.yml

string

controllers.main.containers.main.env[].name (2)

DOCKER_HOST
DOCKER_CERT_PATH
DOCKER_TLS_VERIFY

string

controllers.main.containers.main.env[].value (2)

tcp://localhost:2376
/certs/client
1

string

controllers.main.containers.main.image.pullPolicy (2)

IfNotPresent

string

controllers.main.containers.main.image.repository (2)

code.forgejo.org/forgejo/runner

string

controllers.main.containers.main.image.tag (2)

13.2.1

string

controllers.main.containers.main.resources.limits.ephemeral-storage (2)

500Mi

string

controllers.main.containers.main.resources.limits.memory (2)

1Gi

string

controllers.main.containers.main.resources.requests.cpu (2)

10m

string

controllers.main.containers.main.resources.requests.ephemeral-storage (2)

200Mi

string

controllers.main.containers.main.resources.requests.memory (2)

100Mi

string

controllers.main.containers.main.securityContext.runAsGroup (2)

number

controllers.main.containers.main.securityContext.runAsUser (2)

number

controllers.main.containers.prune.command[] (2)

- sh
- -c
- until docker info >/dev/null 2>&1; do sleep 10; done
last_full=""
while true; do
  sleep 21600
  docker image prune -f
  docker container prune -f --filter until=24h
  docker builder prune -af --filter until=168h
  today=$(date +%Y-%m-%d)
  if [ "$(date +%u)" = 7 ] && [ "$today" != "$last_full" ]; then
    docker image prune -af && docker volume prune -af && last_full=$today
  fi
  docker system df
done

string

controllers.main.containers.prune.env[].name (2)

DOCKER_HOST
DOCKER_CERT_PATH
DOCKER_TLS_VERIFY

string

controllers.main.containers.prune.env[].value (2)

tcp://localhost:2376
/certs/client
1

string

controllers.main.containers.prune.image.repository (2)

mirror.gcr.io/docker

string

controllers.main.containers.prune.image.tag (2)

29.9.3-cli

string

controllers.main.containers.prune.resources.limits.ephemeral-storage (2)

50Mi

string

controllers.main.containers.prune.resources.limits.memory (2)

64Mi

string

controllers.main.containers.prune.resources.requests.cpu (2)

5m

string

controllers.main.containers.prune.resources.requests.ephemeral-storage (2)

10Mi

string

controllers.main.containers.prune.resources.requests.memory (2)

16Mi

string

controllers.main.containers.prune.securityContext.allowPrivilegeEscalation (2)

false

boolean

controllers.main.containers.prune.securityContext.capabilities.drop[] (2)

- ALL

string

controllers.main.containers.prune.securityContext.readOnlyRootFilesystem (2)

true

boolean

controllers.main.containers.prune.securityContext.runAsGroup (2)

number

controllers.main.containers.prune.securityContext.runAsUser (2)

number

controllers.main.initContainers.config.command[] (2)

- sh
- -c
- set -e
umask 077
cp /config/config.yaml /data/runner-config.yml
cat >> /data/runner-config.yml <<EOF

server:
  connections:
    forgejo:
      url: "${FORGEJO_INSTANCE_URL}"
      uuid: "${RUNNER_UUID}"
      token: "${RUNNER_TOKEN}"
EOF
echo "Wrote /data/runner-config.yml for ${FORGEJO_INSTANCE_URL}"

string

controllers.main.initContainers.config.env[].name (2)

FORGEJO_INSTANCE_URL
RUNNER_UUID
RUNNER_TOKEN

string

controllers.main.initContainers.config.env[].value (2)

http://forgejo-http.dev.svc.cluster.local:3000

string

controllers.main.initContainers.config.env[].valueFrom.secretKeyRef.key (2)

UUID
TOKEN

string

controllers.main.initContainers.config.env[].valueFrom.secretKeyRef.name (2)

forgejo-runner
forgejo-runner

string

controllers.main.initContainers.config.image.pullPolicy (2)

IfNotPresent

string

controllers.main.initContainers.config.image.repository (2)

code.forgejo.org/forgejo/runner

string

controllers.main.initContainers.config.image.tag (2)

13.2.1

string

controllers.main.initContainers.config.securityContext.runAsGroup (2)

number

controllers.main.initContainers.config.securityContext.runAsUser (2)

number

controllers.main.replicas (2)

number

controllers.main.type (2)

statefulset

string

persistence.config.type (10)

configMap

string

persistence.config.globalMounts[].path (8)

/config

string

persistence.config.globalMounts[].readOnly (1)

true

boolean

persistence.config.globalMounts[].subPath (1)

config.yaml

string

persistence.config.identifier (5)

config

string

persistence.config.name (5)

forgejo-runner-configmap

string

persistence.config.advancedMounts.main.config[].path (2)

/config

string

persistence.config.enabled (2)

true

boolean

persistence.plugin.type (7)

emptyDir

string

persistence.plugin.globalMounts[].path (5)

/plugin

string

persistence.runner-secret.name (7)

forgejo-runner-secret

string

persistence.runner-secret.type (7)

secret

string

persistence.runner-secret.globalMounts[].path (5)

/etc/forgejo-runner-secret

string

persistence.runner-secret.globalMounts[].readOnly (5)

true

boolean

persistence.runner-secret.advancedMounts.forgejo-runner.runner[].path (2)

/etc/forgejo-runner-secret

string

persistence.runner-secret.advancedMounts.forgejo-runner.runner[].readOnly (2)

true

boolean

persistence.tmpfs.globalMounts[].path (6)

/data
/tmp

string

persistence.tmpfs.globalMounts[].subPath (6)

data
tmp

string

persistence.tmpfs.type (6)

emptyDir

string

persistence.docker-certs.globalMounts[].path (4)

/certs

string

persistence.docker-certs.type (4)

emptyDir

string

persistence.docker-certs.enabled (2)

true

boolean

persistence.docker-certs.sizeLimit (2)

100Mi

string

persistence.daemon-config.advancedMounts.main.daemon[].path (2)

/etc/docker/daemon.json

string

persistence.daemon-config.advancedMounts.main.daemon[].readOnly (2)

true

boolean

persistence.daemon-config.advancedMounts.main.daemon[].subPath (2)

daemon.json

string

persistence.daemon-config.enabled (2)

true

boolean

persistence.daemon-config.name (2)

forgejo-runner-daemon-config

string

persistence.daemon-config.type (2)

configMap

string

persistence.data.globalMounts[].path (2)

/data

string

persistence.data.accessMode (1)

ReadWriteOnce

string

persistence.data.existingClaim (1)

forgejo-runner-data

string

persistence.data.size (1)

50Gi

string

persistence.data.storageClass (1)

miroir-local-slow

string

persistence.data.type (1)

persistentVolumeClaim

string

persistence.docker-data.accessMode (2)

ReadWriteOnce

string

persistence.docker-data.advancedMounts.main.daemon[].path (2)

/var/lib/docker

string

persistence.docker-data.advancedMounts.main.main[].path (2)

/var/lib/docker

string

persistence.docker-data.enabled (2)

true

boolean

persistence.docker-data.size (2)

30Gi

string

persistence.docker-data.storageClass (2)

local-path

string

persistence.registry-mirrors.advancedMounts.main.daemon[].path (2)

/etc/docker/certs.d

string

persistence.registry-mirrors.advancedMounts.main.daemon[].readOnly (2)

true

boolean

persistence.registry-mirrors.enabled (2)

true

boolean

persistence.registry-mirrors.items[].key (2)

registry-docker.io.toml
registry-ghcr.io.toml
registry-quay.io.toml
registry-mirror.gcr.io.toml

string

persistence.registry-mirrors.items[].path (2)

docker.io/hosts.toml
ghcr.io/hosts.toml
quay.io/hosts.toml
mirror.gcr.io/hosts.toml

string

persistence.registry-mirrors.name (2)

forgejo-runner-registry-mirrors

string

persistence.registry-mirrors.type (2)

configMap

string

persistence.runner-data.accessMode (2)

ReadWriteOnce

string

persistence.runner-data.advancedMounts.main.config[].path (2)

/data

string

persistence.runner-data.advancedMounts.main.main[].path (2)

/data

string

persistence.runner-data.enabled (2)

true

boolean

persistence.runner-data.globalMounts[].path (2)

/data

string

persistence.runner-data.size (2)

10Gi

string

persistence.runner-data.storageClass (2)

local-path

string

persistence.runner-data.type (2)

emptyDir

string

persistence.cache.globalMounts[].path (1)

/cache
/.cache

string

persistence.cache.globalMounts[].readOnly (1)

false
false

boolean

persistence.cache.globalMounts[].subPath (1)

cache
cachelocal

string

persistence.cache.type (1)

emptyDir

string

persistence.certs.type (1)

emptyDir

string

persistence.persistent.globalMounts[].path (1)

/persistent

string

persistence.persistent.type (1)

emptyDir

string

persistence.tmp.globalMounts[].path (1)

/tmp

string

persistence.tmp.type (1)

emptyDir

string

forgejo.existingSecret (6)

forgejo-runner-secret

string

forgejo.url (6)

http://forgejo-http.default.svc.cluster.local:3000

string

image.repository (6)

data.forgejo.org/forgejo/runner

string

image.tag (6)

13.2.1

string

image.digest (3)

sha256:c4af85fd9f0dd03788676a534781a87c71aa2c6a37737143e017eb94d4312952

string

plugin.image.repository (6)

registry.erwanleboucher.dev/eleboucher/runner-k8s-plugin

string

plugin.image.digest (3)

sha256:9ae8a21340cde415b828adc95bc4f1345bed67c21a0e3be26032d367a64b20db

string

plugin.image.tag (3)

13.2.1

string

plugin.resources.limits.memory (2)

512Mi

string

plugin.resources.requests.cpu (2)

5m

string

plugin.resources.requests.memory (2)

64Mi

string

podLabels."app.kubernetes.io/component" (6)

forgejo-runner

string

podSpecs."podspec-default.yaml" (6)

containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:fea688b875acdce4e7c786d117b30c1b0203271b23e77d80c306b373d9f5422f
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      requests:
        cpu: 100m
        memory: 1Gi
      limits:
        cpu: 500m
        memory: 4Gi
restartPolicy: Never

string

podSpecs."podspec-dind.yaml" (6)

initContainers:
  - name: dind
    image: docker:29-dind
    args:
      - --ipv6
      - --fixed-cidr-v6=fd00:d1d::/64
    securityContext:
      privileged: true
    restartPolicy: Always
    env:
      - name: DOCKER_TLS_CERTDIR
        value: /certs
    resources:
      requests:
        cpu: 100m
        memory: 1Gi
      limits:
        cpu: 500m
        memory: 8Gi
    volumeMounts:
      - name: docker-storage
        mountPath: /var/lib/docker
      - name: docker-certs
        mountPath: /certs
    startupProbe:
      exec:
        command:
          - sh
          - -c
          - docker --tlsverify --tlscacert=/certs/client/ca.pem --tlscert=/certs/client/cert.pem --tlskey=/certs/client/key.pem -H tcp://localhost:2376 info
      initialDelaySeconds: 5
      periodSeconds: 1
      failureThreshold: 30
containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
      - name: DOCKER_HOST
        value: tcp://localhost:2376
      - name: DOCKER_TLS_VERIFY
        value: "1"
      - name: DOCKER_CERT_PATH
        value: /certs/client
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:fea688b875acdce4e7c786d117b30c1b0203271b23e77d80c306b373d9f5422f
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      requests:
        cpu: 100m
        memory: 1Gi
      limits:
        cpu: 500m
        memory: 4Gi
    volumeMounts:
      - name: docker-certs
        mountPath: /certs
        readOnly: true
volumes:
  - name: docker-storage
    emptyDir: {}
  - name: docker-certs
    emptyDir: {}
restartPolicy: Never

string

podSpecs."podspec-heavy.yaml" (3)

containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:fea688b875acdce4e7c786d117b30c1b0203271b23e77d80c306b373d9f5422f
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      # Burstable on purpose: at 36Gi request=limit this held
      # oom_score_adj -997 and the kernel killed postgres instead of it.
      requests:
        cpu: "4"
        memory: 8Gi
        ephemeral-storage: 40Gi
      limits:
        cpu: "12"
        memory: 24Gi
        ephemeral-storage: 60Gi
    volumeMounts:
      # $BUILDDIR: the plugin's own "shared" workdir is capped at 10Gi.
      - name: build
        mountPath: /build
volumes:
  - name: build
    emptyDir:
      sizeLimit: 40Gi
restartPolicy: Never

string

podSpecs."podspec-buildkit.yaml" (1)

containers:
  - env:
      - name: BUILDKIT_HOST
        value: tcp://buildkit.forgejo.svc.cluster.local:1234
      - name: DEBIAN_FRONTEND
        value: noninteractive
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:8b7a25c7b3235c27e97df1cbb8411c1d12d2676e739265b5fbb66bb55f72dbf6
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        cpu: "1"
        memory: 1Gi
      requests:
        cpu: 100m
        memory: 128Mi
    volumeMounts:
      - mountPath: /buildkit-certs
        name: buildkit-certs
        readOnly: true
volumes:
  - name: buildkit-certs
    secret:
      secretName: buildkit-client-cert
restartPolicy: Never

string

podSpecs."podspec-talos.yaml" (1)

containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
      - name: NODE
        valueFrom:
          fieldRef:
            fieldPath: status.hostIP
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-24.04@sha256:8b7a25c7b3235c27e97df1cbb8411c1d12d2676e739265b5fbb66bb55f72dbf6
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        cpu: "2"
        memory: 2Gi
      requests:
        cpu: 500m
        memory: 256Mi
    volumeMounts:
      - mountPath: /var/run/secrets/talos.dev
        name: talos
        readOnly: true
volumes:
  - name: talos
    secret:
      secretName: forgejo-runner-talos
restartPolicy: Never

string

rbac.bindings.forgejo-runner.roleRef.identifier (6)

forgejo-runner

string

rbac.bindings.forgejo-runner.subjects[].identifier (6)

forgejo-runner

string

rbac.bindings.forgejo-runner.type (6)

RoleBinding

string

rbac.roles.forgejo-runner.rules[].apiGroups[] (6)

- batch
- 
- 
-

string

rbac.roles.forgejo-runner.rules[].resources[] (6)

- jobs
- pods
- pods/exec
- pods/log

string

rbac.roles.forgejo-runner.rules[].verbs[] (6)

- create
- get
- list
- watch
- delete
- list
- watch
- get
- create
- get
- list
- watch
- get

string

rbac.roles.forgejo-runner.type (6)

Role

string

runnerConfig (6)

cache:
  enabled: true
  dir: /data/cache
  port: 8088
  proxy_port: 8089
container:
  docker_host: "-"
  workdir_parent: shared/workdir
host:
  workdir_parent: /data/act
log:
  level: info
plugins:
  k8s:
    address: "unix:///plugin/forgejo-runner-k8s.sock"
    options:
      namespace: forgejo
      poll_timeout: 10m
runner:
  capacity: 6
  labels:
    - ubuntu-latest:k8s:///config/podspec-default.yaml
    - ubuntu-24.04:k8s:///config/podspec-default.yaml
    - default:k8s:///config/podspec-default.yaml
    - buildkit:k8s:///config/podspec-buildkit.yaml
    - docker:k8s:///config/podspec-dind.yaml
    - multiarch:k8s:///config/podspec-dind.yaml
    - talos:k8s:///config/podspec-talos.yaml
  timeout: 3h
  shutdown_timeout: 3m

string

configMaps.config.data."podspec-default.yaml" (5)

automountServiceAccountToken: false
containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-26.04@sha256:8fab1550745c46d892027c5d204be026cc4832b1530c0c15ebee4b3ea8adb90b
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        memory: 2Gi
      requests:
        cpu: 100m
        memory: 256Mi
restartPolicy: Never

string

configMaps.config.data."podspec-dind.yaml" (5)

automountServiceAccountToken: false
initContainers:
  - name: dind
    image: docker:29-dind
    securityContext:
      privileged: true
    restartPolicy: Always
    env:
      - name: DOCKER_TLS_CERTDIR
        value: /certs
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits:
        memory: 4Gi
    volumeMounts:
      - name: docker-storage
        mountPath: /var/lib/docker
      - name: docker-certs
        mountPath: /certs
    startupProbe:
      exec:
        command:
          - sh
          - -c
          - docker --tlsverify --tlscacert=/certs/client/ca.pem --tlscert=/certs/client/cert.pem --tlskey=/certs/client/key.pem -H tcp://localhost:2376 info
      initialDelaySeconds: 5
      periodSeconds: 1
      failureThreshold: 30
containers:
  - env:
      - name: DEBIAN_FRONTEND
        value: noninteractive
      - name: DOCKER_HOST
        value: tcp://localhost:2376
      - name: DOCKER_TLS_VERIFY
        value: "1"
      - name: DOCKER_CERT_PATH
        value: /certs/client
    image: ghcr.io/bjw-s-labs/forgejo-runner:ubuntu-26.04@sha256:8fab1550745c46d892027c5d204be026cc4832b1530c0c15ebee4b3ea8adb90b
    imagePullPolicy: IfNotPresent
    name: main
    resources:
      limits:
        memory: 2Gi
      requests:
        cpu: 100m
        memory: 256Mi
    volumeMounts:
      - name: docker-certs
        mountPath: /certs
        readOnly: true
volumes:
  - name: docker-storage
    emptyDir: {}
  - name: docker-certs
    emptyDir: {}
restartPolicy: Never

string

configMaps.config.data."runner.yaml" (5)

cache:
  enabled: true
  dir: /data/cache
  port: 8088
  proxy_port: 8089
container:
  docker_host: "-"
  workdir_parent: shared/workdir
host:
  workdir_parent: /data/act
log:
  level: info
plugins:
  k8s:
    address: unix:///plugin/forgejo-runner-k8s.sock
    options:
      namespace: forgejo-runner
      poll_timeout: 10m
      labels: "app.kubernetes.io/name=forgejo-runner-instance,app.kubernetes.io/instance=env-${ENV_ID},egress.policy.home.arpa/block-all=true"
      resources: |
        requests:
          cpu: 100m
          memory: 256Mi
        limits:
          memory: 1Gi
runner:
  capacity: 4
  labels:
    - ubuntu-latest:k8s:///config/podspec-default.yaml
    - ubuntu-26.04:k8s:///config/podspec-default.yaml
    - default:k8s:///config/podspec-default.yaml
    - docker:k8s:///config/podspec-dind.yaml
  timeout: 3h
  shutdown_timeout: 3m

string

configMaps.config.suffix (5)