From 9a34c120686f9a35627a4b34d4e1006e65ac708f Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Tue, 21 Jul 2026 09:35:32 -0700
Subject: [PATCH] =?UTF-8?q?fix(forgejo-runner):=20point=20at=20in-cluster?=
 =?UTF-8?q?=20forgejo=20Service=20:3000=20not=20public=20:443=20=E2=80=94?=
 =?UTF-8?q?=20runner=20i/o=20timeout,=20forgejo=20serves=203000=20not=2044?=
 =?UTF-8?q?3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 k8s/security/ci-cd/charts/forgejo-runner/values.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/k8s/security/ci-cd/charts/forgejo-runner/values.yaml b/k8s/security/ci-cd/charts/forgejo-runner/values.yaml
index 74c9832..be38c31 100644
--- a/k8s/security/ci-cd/charts/forgejo-runner/values.yaml
+++ b/k8s/security/ci-cd/charts/forgejo-runner/values.yaml
@@ -4,7 +4,9 @@ runner:
     tag: "6"          # pin exact release before apply
   name: talos-runner
   labels: "docker:docker://node:22-bookworm"
-  forgejoUrl: https://forgejo.riotpiao.com
+  # In-cluster Service (:3000) — direct, avoids the ingress/public-hostname hop
+  # (the public URL is :443 which forgejo doesn't serve; runner got i/o timeout).
+  forgejoUrl: http://forgejo-gitea-http.cicd.svc.cluster.local:3000
   # tokenSecret: name of the K8s Secret that holds the runner registration token
   # created automatically by the helmfile presync hook (see helmfile.yaml.gotmpl)
   tokenSecret: runner-token