Story Crater Bot
4ab596196e
- Forgejo git forge + OCI registry - Argo CD pull-based GitOps - Private CA TLS (self-signed 10-year cert) - Machine credentials scoped to repositories
43 lines
1.1 KiB
YAML
43 lines
1.1 KiB
YAML
runner:
|
|
image:
|
|
repository: code.forgejo.org/forgejo/runner
|
|
tag: "6" # pin exact release before apply
|
|
name: talos-runner
|
|
labels: "docker:docker://node:22-bookworm"
|
|
forgejoUrl: https://forgejo.riotpiao.homelab.com
|
|
# tokenSecret: name of the K8s Secret that holds the runner registration token
|
|
# created automatically by the helmfile presync hook (see helmfile.yaml.gotmpl)
|
|
tokenSecret: runner-token
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: "2"
|
|
memory: 4Gi
|
|
|
|
dind:
|
|
image:
|
|
repository: docker
|
|
tag: "27-dind" # pin exact release before apply
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: "2"
|
|
memory: 4Gi
|
|
|
|
persistence:
|
|
reg:
|
|
storageClass: longhorn
|
|
size: 1Gi # .runner registration file + config — survives pod restarts
|
|
dind:
|
|
storageClass: longhorn
|
|
size: 30Gi # docker layer cache — keeps rebuilds fast across restarts
|
|
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|