Skip to main content

Gitea Runner

  • There are some custom changes, have asked the author if he will accept the patch

  • The fix is here

  • Create the runner token

kubectl create secret generic gitea-runner-token --namespace gitea --dry-run=client --from-literal=act-runner-token='lolmyrunnertoken' -o yaml | kubeseal --controller-namespace system --controller-name sealed-secrets -o yaml

Increase parallel jobs execution​

act-runner:
  act_runner:
    parallel_jobs: 5

Private registry auth for job images​

Provide a registry secret (sealed or normal) that contains .dockerconfigjson so the runner can pull images referenced in act_runner.labels.

Example sealed secret creation:

kubectl create secret docker-registry gitea-runner-registry \
  --namespace gitea \
  --docker-server=registry.example.com \
  --docker-username=example-user \
  --docker-password=example-token \
  --dry-run=client -o yaml | \
  kubeseal --controller-namespace system --controller-name sealed-secrets -o yaml

Values example:

act-runner:
  act_runner:
    registrySecretName: gitea-runner-registry
    registrySecretMountPath: /runner/.docker

Create kube config secret​

#!/bin/bash

set -euo pipefail

CLUSTERNAME=$1
SERVICEACCOUNT=$2
NAMESPACE=$3
CONFIG="/tmp/$CLUSTERNAME.config"

kubectl get secret $(kubectl get serviceaccount $SERVICEACCOUNT -n $NAMESPACE -o json | jq -r '.secrets[0].name' ) -n $NAMESPACE -o  json | jq -r '.data["ca.crt"]' | base64 --decode > /tmp/k8s-$CLUSTERNAME.ca.crt

kubectl config --kubeconfig $CONFIG set-cluster $CLUSTERNAME --embed-certs=true --server="https://kubernetes.default.svc" --certificate-authority=/tmp/k8s-$CLUSTERNAME.ca.crt

kubectl config --kubeconfig $CONFIG set-credentials $SERVICEACCOUNT --token=$(kubectl get secret $(kubectl get serviceaccount $SERVICEACCOUNT -n $NAMESPACE -o json | jq -r '.secrets[0].name') -n $NAMESPACE -o json | jq -r '.data.token'  | base64 --decode)

kubectl config --kubeconfig $CONFIG set-context $CLUSTERNAME --cluster=$CLUSTERNAME --user=$SERVICEACCOUNT

kubectl config --kubeconfig $CONFIG use-context $CLUSTERNAME

cat $CONFIG | base64 --wrap=0