flux: limbosolutions-com act runner

2026-06-04 22:15:15 +00:00
parent e3753b9647
commit 1e26f304b6
12 changed files with 66 additions and 48 deletions
@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: act-runner
+data:
+  config.yaml: |
+    log:
+      level: info
+
+    runner:
+      capacity: 4
+      labels:
+        - oci-image-builder
+        - kubectl
+        - helm
+        - ansible
+        - ubuntu
+        - network-utils
+        - deploy
+        - amd64
+    cache:
+      enabled: false
+
+    host:
+      workdir: "/data/runner"
@@ -0,0 +1,68 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: act-runner
+  labels:
+    app: act-runner
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: act-runner
+  template:
+    metadata:
+      labels:
+        app: act-runner
+        buildkit.infra.limbosolutions.com/allow-build: "true"
+        chimera-www.limbosolutions.com/allow: "true"
+    spec:
+      containers:
+        - name: act-runner
+          image: oci.limbosolutions.com/public/gitea-act_runner:fatboy-0.6
+ 
+          imagePullPolicy: Always
+          env:
+            - name: LOG_LEVEL
+              value: "trace"
+
+            - name: CONFIG_FILE
+              value: /etc/act_runner/config.yaml
+            - name: GITEA_INSTANCE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: act-runner
+                  key: GITEA_INSTANCE_URL
+            - name: GITEA_RUNNER_REGISTRATION_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: act-runner
+                  key: GITEA_RUNNER_REGISTRATION_TOKEN
+            - name: GITEA_RUNNER_NAME
+              valueFrom:
+                secretKeyRef:
+                  name: act-runner
+                  key: GITEA_RUNNER_NAME
+
+            - name: GITEA_RUNNER_EPHEMERAL
+              value: "0"
+              
+          resources:
+            requests:
+              memory: "128Mi"
+              cpu: "100m"
+            limits:
+              memory: "512Mi"
+              cpu: "400m"
+          volumeMounts:
+            - name: config-map
+              mountPath: /etc/act_runner/config.yaml
+              subPath: config.yaml
+            - name: runner-data
+              mountPath: /data/runner
+              
+      volumes:
+      - name: config-map
+        configMap: 
+          name: act-runner
+      - name: runner-data
+        emptyDir: {}   # or PVC if you want persistence across pod restarts
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - configmap.yaml
+  - deployment.yaml
+  - secrets.yaml
+
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: act-runner
+type: Opaque
+data:
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:HhBxavSkLF19cY73+gvbLuRe6KI82v/KtXuXv9rm,iv:6gyx6Zs8JiLucSqQybgs9Dz1FQR2WQ1PbELacZaCAxQ=,tag:sNRoLsxGbfV25BQqRhAK0A==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:akEL5H5T8Z9W/Uq/zhz5gyvXENC7vVVM/IFIVQ==,iv:R0yF4pIWuxPwO1isCVGieZKY5kUYfizctXwe4pQOjwI=,tag:DM4jNkudnVdgUXPJQ34bkw==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:VDucrH/tca0UUV3hLrmJZKlpTWlycnyoaIm0JzvfCpCkqgFgVwqZEw==,iv:6nEcMihavJ2iHswz4CSjkD/Yb+I42LgxGby5H9a+or8=,tag:2ZkW6wlmKOMeg9QeyEjOZw==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA1cFFkVUNZVFdOcjF3akxY
+            bTBYUEJwbEJxckdqQXVxc2tEdU1vakxuN0RjCkFqOGJCRk1jcnJXWVp1RjYzUU9a
+            bElsekp3V2RxSFN3akZ1QkY3aU0zTDgKLS0tIDhWd2YxUGxDTmtyci9rUjhUbVYz
+            VXNCa1ZhSW56RlJkbW5KanJlbkU3aEEK+/dQJtiy6Wsntg3F/fMdGx9Aqo/xiYZ7
+            gM7aoYOhQoA3nDYe/0cSLM4vExyLcqQMUcDZGKYlRaND9uq729rAaw==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-06-04T22:12:24Z"
+    mac: ENC[AES256_GCM,data:L2nIeJ5YaXNSBntxGcgNvJz0LQfUVvB0OtbUy+TRFO7DxRlWz4QnRuJBMcnw44+4cuHsJgXMg9Gxe9moD4R9pqa9a3uufX1hULAR5fx+DZWICj2Yopl/FQU30h0helCReklgqP+47xSlFZhZIDRZbyfiTudSU1tBIAW7OZZpC6A=,iv:uHEMG04FvDfNABX0MFuw47PpakfLXMLFo8L1u73xwsY=,tag:JQ0VO4LT1gqpTOzMQAOnkw==,type:str]
+    version: 3.13.1