rock
91729f65e9
- Add gc-cronjob.yaml: daily prune of DinD Docker images/volumes/build-cache and actcache across all forgejo-runner pods. Keeps :latest tagged images, deletes non-latest older than 72h. - Expand runner reg PVCs from 1Gi to 20Gi (all three runners) to prevent action tool cache from filling disk. - Rust runner gets explicit 20Gi persistence override. - GC only renders from golang (default) values to avoid duplicate resources.
67 lines
2.4 KiB
YAML
67 lines
2.4 KiB
YAML
runner:
|
|
image:
|
|
repository: code.forgejo.org/forgejo/runner
|
|
tag: "6" # pin exact release before apply
|
|
name: golang-runner
|
|
# Default image is only used when a job's `container:` doesn't override it
|
|
# (both ci.yaml and build.yaml in homelab-frontend do). Retired the old
|
|
# "docker" label entirely; every repo this runner serves is Go, so this
|
|
# instance carries the golang toolchain and its own dind sidecar builds and
|
|
# pushes that repo's images too -- there is no separate generic runner
|
|
# anymore.
|
|
labels: "golang:docker://golang:1.26-bookworm"
|
|
# In-cluster Service (:3000) — direct, avoids the ingress/public-hostname hop
|
|
# (the public URL is :443 which forgejo doesn't serve; runner got i/o timeout).
|
|
forgejoUrl: http://forgejo-gitea-http.cicd.svc.cluster.local:3000
|
|
# tokenSecret: name of the K8s Secret that holds the runner registration token
|
|
# created automatically by the helmfile presync hook (see helmfile.yaml.gotmpl)
|
|
tokenSecret: runner-token
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: "2"
|
|
memory: 4Gi
|
|
|
|
dind:
|
|
image:
|
|
repository: docker
|
|
tag: "27-dind" # pin exact release before apply
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 256Mi
|
|
limits:
|
|
cpu: "2"
|
|
memory: 4Gi
|
|
|
|
persistence:
|
|
reg:
|
|
storageClass: longhorn # Unified StorageClass (3 replicas)
|
|
size: 20Gi # .runner registration file + action tool cache + actcache artifacts
|
|
dind:
|
|
storageClass: longhorn # Unified StorageClass (3 replicas)
|
|
size: 30Gi # docker layer cache — keeps rebuilds fast across restarts
|
|
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
effect: NoSchedule
|
|
|
|
# Pin to az-a (talos-cp-1) — sole Longhorn node; RWO PVCs (reg/dind cache) only
|
|
# attach there.
|
|
nodeSelector:
|
|
topology.kubernetes.io/zone: az-a
|
|
|
|
# GC CronJob — prunes Docker images/volumes/build-cache and actcache across
|
|
# ALL forgejo-runner pods. Only enable in default values (golang instance);
|
|
# disable in per-runner overrides so it renders once.
|
|
gc:
|
|
enabled: true
|
|
schedule: "0 3 * * *" # daily 03:00 UTC
|
|
image: alpine/k8s:1.31.0
|
|
pruneAge: "72h" # Docker artifacts unused longer than this get pruned
|
|
pruneAgeHours: 72 # Same as pruneAge but numeric for date arithmetic in shell
|
|
actcacheMaxAgeDays: 3 # actcache files older than N days get deleted
|