mirrors/runner
1
0
Fork 0
mirror of https://code.forgejo.org/forgejo/runner.git synced 2024-11-22 04:39:42 +03:00
Code Issues Projects Releases Packages Wiki Activity
runner/examples/kubernetes
History
Earl Warren 294912488c
update kubernetes examples to match version 3.0.0 images 
Starting with Forgejo runner 3.0.0 images are different in two ways
that matter to k8s because they:

* are all rootless
* do not rely on tini
2023-08-26 12:19:06 +02:00
..
dind-docker.yaml update kubernetes examples to match version 3.0.0 images 2023-08-26 12:19:06 +02:00
README.md update kubernetes examples to match version 3.0.0 images 2023-08-26 12:19:06 +02:00

README.md

Kubernetes Docker in Docker Deployment

Registers Kubernetes pod runners using offline registration, allowing the scaling of runners as needed.

NOTE: Docker in Docker (dind) requires elevated privileges on Kubernetes. The current way to achieve this is to set the pod SecurityContext to privileged. Keep in mind that this is a potential security issue that has the potential for a malicious application to break out of the container context.

dind-docker.yaml creates a deployment and secret for Kubernetes to act as a runner. The Docker credentials are re-generated each time the pod connects and does not need to be persisted.