forked from Gitea/helm-actions
Compare commits
1 Commits
b8058bee05
...
christophe
Author | SHA1 | Date | |
---|---|---|---|
![]() |
4afe065177 |
@@ -1 +0,0 @@
|
|||||||
* @DaanSelen @volker.raschek @ChristopherHX
|
|
@@ -19,10 +19,6 @@ maintainers:
|
|||||||
- name: Daan Selen
|
- name: Daan Selen
|
||||||
email: dselen@nerthus.nl
|
email: dselen@nerthus.nl
|
||||||
|
|
||||||
# https://gitea.com/volker.raschek
|
|
||||||
- name: Markus Pesch
|
|
||||||
email: markus.pesch+apps@cryptic.systems
|
|
||||||
|
|
||||||
# https://gitea.com/ChristopherHX
|
# https://gitea.com/ChristopherHX
|
||||||
- name: Christopher Homberger
|
- name: Christopher Homberger
|
||||||
email: christopher.homberger@web.de
|
email: christopher.homberger@web.de
|
||||||
|
@@ -6,10 +6,6 @@ The parameters which can be used to customize the deployment are described below
|
|||||||
|
|
||||||
If you want to propose a new feature or mechanism, submit an [issue here](https://gitea.com/gitea/helm-actions/issues).
|
If you want to propose a new feature or mechanism, submit an [issue here](https://gitea.com/gitea/helm-actions/issues).
|
||||||
|
|
||||||
## Docs
|
|
||||||
|
|
||||||
[Docs](./docs/README.md)
|
|
||||||
|
|
||||||
## Rootless Defaults
|
## Rootless Defaults
|
||||||
|
|
||||||
If `.Values.image.rootless: true`, then the following will occur. In case you use `.Values.image.fullOverride`, check that this works in your image:
|
If `.Values.image.rootless: true`, then the following will occur. In case you use `.Values.image.fullOverride`, check that this works in your image:
|
||||||
@@ -34,12 +30,12 @@ If `.Values.image.rootless: true`, then the following will occur. In case you us
|
|||||||
| `statefulset.affinity` | Affinity for the statefulset | `{}` |
|
| `statefulset.affinity` | Affinity for the statefulset | `{}` |
|
||||||
| `statefulset.extraVolumes` | Extra volumes for the statefulset | `[]` |
|
| `statefulset.extraVolumes` | Extra volumes for the statefulset | `[]` |
|
||||||
| `statefulset.actRunner.repository` | The Gitea act runner image | `gitea/act_runner` |
|
| `statefulset.actRunner.repository` | The Gitea act runner image | `gitea/act_runner` |
|
||||||
| `statefulset.actRunner.tag` | The Gitea act runner tag | `0.2.12` |
|
| `statefulset.actRunner.tag` | The Gitea act runner tag | `0.2.11` |
|
||||||
| `statefulset.actRunner.pullPolicy` | The Gitea act runner pullPolicy | `IfNotPresent` |
|
| `statefulset.actRunner.pullPolicy` | The Gitea act runner pullPolicy | `IfNotPresent` |
|
||||||
| `statefulset.actRunner.extraVolumeMounts` | Allows mounting extra volumes in the act runner container | `[]` |
|
| `statefulset.actRunner.extraVolumeMounts` | Allows mounting extra volumes in the act runner container | `[]` |
|
||||||
| `statefulset.actRunner.config` | Act runner custom configuration. See [Act Runner documentation](https://docs.gitea.com/usage/actions/act-runner#configuration) for details. | `Too complex. See values.yaml` |
|
| `statefulset.actRunner.config` | Act runner custom configuration. See [Act Runner documentation](https://docs.gitea.com/usage/actions/act-runner#configuration) for details. | `Too complex. See values.yaml` |
|
||||||
| `statefulset.dind.repository` | The Docker-in-Docker image | `docker` |
|
| `statefulset.dind.repository` | The Docker-in-Docker image | `docker` |
|
||||||
| `statefulset.dind.tag` | The Docker-in-Docker image tag | `28.3.3-dind` |
|
| `statefulset.dind.tag` | The Docker-in-Docker image tag | `25.0.2-dind` |
|
||||||
| `statefulset.dind.pullPolicy` | The Docker-in-Docker pullPolicy | `IfNotPresent` |
|
| `statefulset.dind.pullPolicy` | The Docker-in-Docker pullPolicy | `IfNotPresent` |
|
||||||
| `statefulset.dind.extraVolumeMounts` | Allows mounting extra volumes in the Docker-in-Docker container | `[]` |
|
| `statefulset.dind.extraVolumeMounts` | Allows mounting extra volumes in the Docker-in-Docker container | `[]` |
|
||||||
| `statefulset.dind.extraEnvs` | Allows adding custom environment variables, such as `DOCKER_IPTABLES_LEGACY` | `[]` |
|
| `statefulset.dind.extraEnvs` | Allows adding custom environment variables, such as `DOCKER_IPTABLES_LEGACY` | `[]` |
|
||||||
|
@@ -1,3 +0,0 @@
|
|||||||
# Gitea Actions Helm Chart Docs
|
|
||||||
|
|
||||||
- [Share dind with job container](share-dind-with-job-container.md)
|
|
@@ -1,36 +0,0 @@
|
|||||||
# Share dind with job container
|
|
||||||
|
|
||||||
You can weaken isolation and allow jobs to call docker commands.
|
|
||||||
|
|
||||||
## Limitations
|
|
||||||
|
|
||||||
- Docker bind mounts like `-v /path/on/self/container:/path/to/new/container` do not work, because they are going to mount the path from the dind container
|
|
||||||
- Docker port expose to local host `-e 80:8080` is not going to work
|
|
||||||
|
|
||||||
## Example Values
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
enabled: true
|
|
||||||
statefulset:
|
|
||||||
actRunner:
|
|
||||||
# See full example here: https://gitea.com/gitea/act_runner/src/branch/main/internal/pkg/config/config.example.yaml
|
|
||||||
config: |
|
|
||||||
log:
|
|
||||||
level: debug
|
|
||||||
cache:
|
|
||||||
enabled: false
|
|
||||||
container:
|
|
||||||
valid_volumes:
|
|
||||||
- /var/run/docker.sock
|
|
||||||
options: -v /var/run/docker.sock:/var/run/docker.sock
|
|
||||||
|
|
||||||
## Specify an existing token secret
|
|
||||||
##
|
|
||||||
existingSecret: "runner-token2"
|
|
||||||
existingSecretKey: "token"
|
|
||||||
|
|
||||||
## Specify the root URL of the Gitea instance
|
|
||||||
giteaRootURL: "http://192.168.1.2:3000"
|
|
||||||
```
|
|
||||||
|
|
||||||
Now you can run docker commands inside your jobs.
|
|
@@ -48,27 +48,13 @@ spec:
|
|||||||
image: "{{ .Values.statefulset.actRunner.repository }}:{{ .Values.statefulset.actRunner.tag }}"
|
image: "{{ .Values.statefulset.actRunner.repository }}:{{ .Values.statefulset.actRunner.tag }}"
|
||||||
imagePullPolicy: {{ .Values.statefulset.actRunner.pullPolicy }}
|
imagePullPolicy: {{ .Values.statefulset.actRunner.pullPolicy }}
|
||||||
workingDir: /data
|
workingDir: /data
|
||||||
command:
|
|
||||||
# The following is a workaround for: https://gitea.com/gitea/act_runner/issues/731
|
|
||||||
# We must add the docker-cli package for the server AND client cert verification.
|
|
||||||
- sh
|
|
||||||
- -c
|
|
||||||
- |
|
|
||||||
apk add --no-cache docker-cli
|
|
||||||
echo "Waiting for Docker daemon..."
|
|
||||||
until timeout 10 docker info > /dev/null; do
|
|
||||||
echo "Failed, retrying..."
|
|
||||||
sleep 2
|
|
||||||
done
|
|
||||||
echo "Docker is ready, starting act-runner..."
|
|
||||||
exec run.sh
|
|
||||||
env:
|
env:
|
||||||
- name: DOCKER_HOST
|
- name: DOCKER_HOST
|
||||||
value: tcp://127.0.0.1:2376
|
value: tcp://127.0.0.1:2376
|
||||||
- name: DOCKER_TLS_VERIFY
|
- name: DOCKER_TLS_VERIFY
|
||||||
value: "1"
|
value: "1"
|
||||||
- name: DOCKER_CERT_PATH
|
- name: DOCKER_CERT_PATH
|
||||||
value: /certs/client
|
value: /certs/server
|
||||||
- name: GITEA_RUNNER_REGISTRATION_TOKEN
|
- name: GITEA_RUNNER_REGISTRATION_TOKEN
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
@@ -84,7 +70,7 @@ spec:
|
|||||||
- mountPath: /actrunner/config.yaml
|
- mountPath: /actrunner/config.yaml
|
||||||
name: act-runner-config
|
name: act-runner-config
|
||||||
subPath: config.yaml
|
subPath: config.yaml
|
||||||
- mountPath: /certs/client
|
- mountPath: /certs/server
|
||||||
name: docker-certs
|
name: docker-certs
|
||||||
- mountPath: /data
|
- mountPath: /data
|
||||||
name: data-act-runner
|
name: data-act-runner
|
||||||
@@ -100,7 +86,7 @@ spec:
|
|||||||
- name: DOCKER_TLS_VERIFY
|
- name: DOCKER_TLS_VERIFY
|
||||||
value: "1"
|
value: "1"
|
||||||
- name: DOCKER_CERT_PATH
|
- name: DOCKER_CERT_PATH
|
||||||
value: /certs/client
|
value: /certs/server
|
||||||
{{- if .Values.statefulset.dind.extraEnvs }}
|
{{- if .Values.statefulset.dind.extraEnvs }}
|
||||||
{{- toYaml .Values.statefulset.dind.extraEnvs | nindent 12 }}
|
{{- toYaml .Values.statefulset.dind.extraEnvs | nindent 12 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
@@ -109,7 +95,7 @@ spec:
|
|||||||
resources:
|
resources:
|
||||||
{{- toYaml .Values.statefulset.resources | nindent 12 }}
|
{{- toYaml .Values.statefulset.resources | nindent 12 }}
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- mountPath: /certs/client
|
- mountPath: /certs/server
|
||||||
name: docker-certs
|
name: docker-certs
|
||||||
{{- with .Values.statefulset.dind.extraVolumeMounts }}
|
{{- with .Values.statefulset.dind.extraVolumeMounts }}
|
||||||
{{- toYaml . | nindent 12 }}
|
{{- toYaml . | nindent 12 }}
|
||||||
@@ -126,10 +112,6 @@ spec:
|
|||||||
tolerations:
|
tolerations:
|
||||||
{{- toYaml . | nindent 8 }}
|
{{- toYaml . | nindent 8 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.statefulset.dnsConfig }}
|
|
||||||
dnsConfig:
|
|
||||||
{{- toYaml .Values.statefulset.dnsConfig | nindent 8 }}
|
|
||||||
{{- end }}
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: act-runner-config
|
- name: act-runner-config
|
||||||
configMap:
|
configMap:
|
||||||
|
@@ -10,7 +10,6 @@
|
|||||||
## @param statefulset.resources Act runner resources
|
## @param statefulset.resources Act runner resources
|
||||||
## @param statefulset.nodeSelector NodeSelector for the statefulset
|
## @param statefulset.nodeSelector NodeSelector for the statefulset
|
||||||
## @param statefulset.tolerations Tolerations for the statefulset
|
## @param statefulset.tolerations Tolerations for the statefulset
|
||||||
## @param statefulset.dnsConfig dnsConfig for the statefulset
|
|
||||||
## @param statefulset.affinity Affinity for the statefulset
|
## @param statefulset.affinity Affinity for the statefulset
|
||||||
## @param statefulset.extraVolumes Extra volumes for the statefulset
|
## @param statefulset.extraVolumes Extra volumes for the statefulset
|
||||||
## @param statefulset.actRunner.repository The Gitea act runner image
|
## @param statefulset.actRunner.repository The Gitea act runner image
|
||||||
@@ -35,13 +34,12 @@ statefulset:
|
|||||||
resources: {}
|
resources: {}
|
||||||
nodeSelector: {}
|
nodeSelector: {}
|
||||||
tolerations: []
|
tolerations: []
|
||||||
dnsConfig: {}
|
|
||||||
affinity: {}
|
affinity: {}
|
||||||
extraVolumes: []
|
extraVolumes: []
|
||||||
|
|
||||||
actRunner:
|
actRunner:
|
||||||
repository: gitea/act_runner
|
repository: gitea/act_runner
|
||||||
tag: 0.2.12
|
tag: 0.2.11
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
extraVolumeMounts: []
|
extraVolumeMounts: []
|
||||||
|
|
||||||
@@ -54,7 +52,7 @@ statefulset:
|
|||||||
|
|
||||||
dind:
|
dind:
|
||||||
repository: docker
|
repository: docker
|
||||||
tag: 28.3.3-dind
|
tag: 25.0.2-dind
|
||||||
pullPolicy: IfNotPresent
|
pullPolicy: IfNotPresent
|
||||||
extraVolumeMounts: []
|
extraVolumeMounts: []
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user