UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects
README.md 4.46 KiB
Newer Older
kevin.wilder's avatar
kevin.wilder committed
# gitlab-runner
![Version: 0.44.0-bb.0](https://img.shields.io/badge/Version-0.44.0--bb.0-informational?style=flat-square) ![AppVersion: 15.3.0](https://img.shields.io/badge/AppVersion-15.3.0-informational?style=flat-square)
kevin.wilder's avatar
kevin.wilder committed
GitLab Runner

## Upstream References
* <https://gitlab.com/gitlab-org/gitlab-runner>
olelink's avatar
olelink committed
* <https://docs.gitlab.com/runner/>
## Learn More
* [Application Overview](docs/overview.md)
* [Other Documentation](docs/)

## Pre-Requisites

* Kubernetes Cluster deployed
* Kubernetes config installed in `~/.kube/config`
* Helm installed

Install Helm

https://helm.sh/docs/intro/install/

## Deployment

* Clone down the repository
* cd into directory
```bash
helm install gitlab-runner chart/
```

kevin.wilder's avatar
kevin.wilder committed
## Values

| Key | Type | Default | Description |
|-----|------|---------|-------------|
| image | string | `nil` |  |
| registry | string | `"registry1.dso.mil"` |  |
| repository | string | `"ironbank/gitlab/gitlab-runner/gitlab-runner"` |  |
kevin.wilder's avatar
kevin.wilder committed
| imagePullPolicy | string | `"IfNotPresent"` |  |
| probeTimeoutSeconds | int | `1` |  |
| replicas | int | `1` |  |
| revisionHistoryLimit | int | `10` |  |
kevin.wilder's avatar
kevin.wilder committed
| gitlabUrl | string | `"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181"` |  |
| terminationGracePeriodSeconds | int | `3600` |  |
| concurrent | int | `50` |  |
| checkInterval | int | `30` |  |
| sessionServer.enabled | bool | `false` |  |
kevin.wilder's avatar
kevin.wilder committed
| rbac.create | bool | `true` |  |
| rbac.rules | list | `[]` |  |
| rbac.clusterWideAccess | bool | `false` |  |
| rbac.podSecurityPolicy.enabled | bool | `false` |  |
| rbac.podSecurityPolicy.resourceNames[0] | string | `"gitlab-runner"` |  |
| metrics.enabled | bool | `false` |  |
olelink's avatar
olelink committed
| metrics.portName | string | `"tcp-metrics"` |  |
kevin.wilder's avatar
kevin.wilder committed
| metrics.port | int | `9252` |  |
| metrics.serviceMonitor.enabled | bool | `false` |  |
kevin.wilder's avatar
kevin.wilder committed
| service.enabled | bool | `true` |  |
| service.type | string | `"ClusterIP"` |  |
| runners.job.registry | string | `"registry1.dso.mil"` |  |
| runners.job.repository | string | `"ironbank/redhat/ubi/ubi8"` |  |
| runners.job.tag | string | `"8.6"` |  |
| runners.helper.registry | string | `"registry1.dso.mil"` |  |
| runners.helper.repository | string | `"ironbank/gitlab/gitlab-runner/gitlab-runner-helper"` |  |
| runners.helper.tag | string | `"v15.3.0"` |  |
| runners.config | string | `"[[runners]]\n  clone_url = \"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181\"\n  cache_dir = \"/tmp/gitlab-runner/cache\"\n  [runners.kubernetes]\n    namespace = \"{{.Release.Namespace}}\"\n    image = \"{{ printf \"%s/%s:%s\" .Values.runners.job.registry .Values.runners.job.repository .Values.runners.job.tag }}\"\n    helper_image = \"{{ printf \"%s/%s:%s\" .Values.runners.helper.registry .Values.runners.helper.repository .Values.runners.helper.tag }}\"\n    image_pull_secrets = [\"private-registry\"]\n  [runners.kubernetes.pod_labels]\n    \"job_id\" = \"${CI_JOB_ID}\"\n    \"job_name\" = \"${CI_JOB_NAME}\"\n    \"pipeline_id\" = \"${CI_PIPELINE_ID}\"\n"` |  |
kevin.wilder's avatar
kevin.wilder committed
| runners.locked | bool | `false` |  |
| runners.runUntagged | bool | `true` |  |
| runners.protected | bool | `true` |  |
| runners.secret | string | `"gitlab-gitlab-runner-secret"` |  |
| runners.cache | object | `{}` |  |
| runners.builds | object | `{}` |  |
| runners.services | object | `{}` |  |
| runners.helpers | object | `{}` |  |
| securityContext.allowPrivilegeEscalation | bool | `false` |  |
| securityContext.readOnlyRootFilesystem | bool | `false` |  |
| securityContext.runAsNonRoot | bool | `true` |  |
| securityContext.privileged | bool | `false` |  |
| securityContext.capabilities.drop[0] | string | `"ALL"` |  |
| podSecurityContext.runAsUser | int | `100` |  |
| podSecurityContext.fsGroup | int | `65533` |  |
| containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
kevin.wilder's avatar
kevin.wilder committed
| resources.limits.memory | string | `"256Mi"` |  |
| resources.limits.cpu | string | `"200m"` |  |
| resources.requests.memory | string | `"256Mi"` |  |
| resources.requests.cpu | string | `"200m"` |  |
| affinity | object | `{}` |  |
| nodeSelector | object | `{}` |  |
| tolerations | list | `[]` |  |
| hostAliases | list | `[]` |  |
| podAnnotations | object | `{}` |  |
| podLabels | object | `{}` |  |
| priorityClassName | string | `""` |  |
kevin.wilder's avatar
kevin.wilder committed
| secrets | list | `[]` |  |
| configMaps | object | `{}` |  |
| volumeMounts | list | `[]` |  |
| volumes | list | `[]` |  |
| monitoring.enabled | bool | `false` |  |
## Contributing

Please see the [contributing guide](./CONTRIBUTING.md) if you are interested in contributing.