flux: kb act runner

2026-06-04 20:46:10 +00:00
parent 7e68e15683
commit b7fb972c6c
8 changed files with 21 additions and 1 deletions
@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: act-runner
+data:
+  config.yaml: |
+    log:
+      level: info
+
+    runner:
+      capacity: 4
+      labels:
+        - oci-image-builder
+        - kubectl
+        - helm
+        - ansible
+        - ubuntu
+        - network-utils
+        - deploy
+        - amd64
+    cache:
+      enabled: false
+
+    host:
+      workdir: "/data/runner"
@@ -0,0 +1,68 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: act-runner
+  labels:
+    app: act-runner
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: act-runner
+  template:
+    metadata:
+      labels:
+        app: act-runner
+        buildkit.infra.limbosolutions.com/allow-build: "true"
+        chimera-www.limbosolutions.com/allow: "true"
+    spec:
+      containers:
+        - name: act-runner
+          image: oci.limbosolutions.com/public/gitea-act_runner:fatboy-0.6
+ 
+          imagePullPolicy: Always
+          env:
+            - name: LOG_LEVEL
+              value: "trace"
+
+            - name: CONFIG_FILE
+              value: /etc/act_runner/config.yaml
+            - name: GITEA_INSTANCE_URL
+              valueFrom:
+                secretKeyRef:
+                  name: act-runner
+                  key: GITEA_INSTANCE_URL
+            - name: GITEA_RUNNER_REGISTRATION_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: act-runner
+                  key: GITEA_RUNNER_REGISTRATION_TOKEN
+            - name: GITEA_RUNNER_NAME
+              valueFrom:
+                secretKeyRef:
+                  name: act-runner
+                  key: GITEA_RUNNER_NAME
+
+            - name: GITEA_RUNNER_EPHEMERAL
+              value: "0"
+              
+          resources:
+            requests:
+              memory: "128Mi"
+              cpu: "100m"
+            limits:
+              memory: "512Mi"
+              cpu: "400m"
+          volumeMounts:
+            - name: config-map
+              mountPath: /etc/act_runner/config.yaml
+              subPath: config.yaml
+            - name: runner-data
+              mountPath: /data/runner
+              
+      volumes:
+      - name: config-map
+        configMap: 
+          name: act-runner
+      - name: runner-data
+        emptyDir: {}   # or PVC if you want persistence across pod restarts
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kb-cicd 
+resources:
+  - configmap.yaml
+  - deployment.yaml
+  - secrets.yaml
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: act-runner
+type: Opaque
+data:
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:4TKctXyD4X9E8gJJHt9WI30w7bDxEzDMncRX/Ddr,iv:MeTSf+Nbfr0ERJg2RmIzTdXG/0yrCGKtMCEUTIGNlo4=,tag:zViPlFCXecj9dYX8i0duxA==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:0GvSAV4w4Z4DF2qr,iv:3bRGeouS0j8FH4qBJXawzkcT34wUJwH+kfQOH18Xr+8=,tag:7IEf+iR7cgKvgAuwh+ttGQ==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:/pRPj8K35WTIUDSyswwOCFN+iZN4itBJkQYCvyxiJZqW6c/1PBc8/w==,iv:i0l/qDoQYIomRhQqBkvsUfhaS5ao3HlxxHGe0sU9Fkc=,tag:SLlv7SG1J6OdJ5/HINBX9w==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrMzMzWE9OVDZqRjhtemhM
+            NHNCWFkrQm1kMmRwSlhhM3k0MEZyVzJudEJBCkZWaVpnbHBQaXhnT1dSWktubnox
+            NkY5cHBCK2liM0xIbGVIK09JOG5IcUkKLS0tIGVLQnBSZnBQU1Jreld6ZExnS3Zz
+            Mi9YTWM0b1dpVGJwcEwrSlJRYTRFbnMKWScrnjaOYx32yxDEapYITrAaPHq8ghFE
+            Q+xdv6szmhkWYYN3TZC1MvySFD2BR8VMlK31VQ/RZ+YrKjm8SF/8oQ==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-06-04T20:38:18Z"
+    mac: ENC[AES256_GCM,data:StxGbN+6B3YKLbG1ptfnpTV9aHiUA7N7VyKdvbUOkVXCs4u/1IKVuqbq0zeliM6bjHh4ZhNcCjKFMNvqlIGsxJVNp+BdjMuVkw8Zc3g9z9SfvbpEbR+k+HLdHhOR/rZ8TS2m/bAlwmp/qVFi05rEjrC0lFO6klXO4gdFYpSMbY0=,iv:ghRsTJiXV6L7coLUKS+0LH4RRhdDycOBReAX77Jqews=,tag:73oWt9QNZEaLYwnBRO6PhA==,type:str]
+    version: 3.13.1