merith-tk/forgejo-runner
1
0
Fork 0
Code Issues Pull requests 2 Projects Releases Packages Wiki Activity Actions
forgejo-runner/examples/kubernetes
History
Gabriel Simmer f82d6e49ca
[FORGEJO] update Kubernetes example README
2023-08-23 16:03:12 +02:00
..
dind-docker.yaml [FORGEJO] simplify Kubernetes examples with offline registration 2023-08-23 16:03:12 +02:00
README.md [FORGEJO] update Kubernetes example README 2023-08-23 16:03:12 +02:00
rootless-docker.yaml [FORGEJO] simplify Kubernetes examples with offline registration 2023-08-23 16:03:12 +02:00

README.md

Kubernetes Docker in Docker Deployment with act_runner

Registers Kubernetes pod runners using offline registration, allowing the scaling of runners as needed.

NOTE: Docker in Docker (dind) requires elevated privileges on Kubernetes. The current way to achieve this is to set the pod SecurityContext to privileged. Keep in mind that this is a potential security issue that has the potential for a malicious application to break out of the container context.

Files in this directory:

  • dind-docker.yaml How to create a Deployment and Secret for Kubernetes to act as a runner. The Docker credentials are re-generated each time the pod connects and does not need to be persisted.

  • rootless-docker.yaml How to create a rootless Deployment and Secret for Kubernetes to act as a runner. The Docker credentials are re-generated each time the pod connects and does not need to be persisted.