refactor(k8s): Reorganize into 5-layer structure with production kustomizations

2026-08-18 15:08:01 -07:00
parent 563f720d09
commit 0f30d77288
214 changed files with 405 additions and 885 deletions
@@ -0,0 +1,42 @@
+runner:
+  image:
+    repository: code.forgejo.org/forgejo/runner
+    tag: "6"          # pin exact release before apply
+  name: talos-runner
+  labels: "docker:docker://node:22-bookworm"
+  forgejoUrl: https://forgejo.riotpiao.homelab.com
+  # tokenSecret: name of the K8s Secret that holds the runner registration token
+  # created automatically by the helmfile presync hook (see helmfile.yaml.gotmpl)
+  tokenSecret: runner-token
+  resources:
+    requests:
+      cpu: 100m
+      memory: 256Mi
+    limits:
+      cpu: "2"
+      memory: 4Gi
+
+dind:
+  image:
+    repository: docker
+    tag: "27-dind"    # pin exact release before apply
+  resources:
+    requests:
+      cpu: 100m
+      memory: 256Mi
+    limits:
+      cpu: "2"
+      memory: 4Gi
+
+persistence:
+  reg:
+    storageClass: longhorn
+    size: 1Gi         # .runner registration file + config — survives pod restarts
+  dind:
+    storageClass: longhorn
+    size: 30Gi        # docker layer cache — keeps rebuilds fast across restarts
+
+tolerations:
+  - key: node-role.kubernetes.io/control-plane
+    operator: Exists
+    effect: NoSchedule