init

.gitignore

@@ -0,0 +1 @@
+runnerconfig.yaml

README.md

@@ -0,0 +1,22 @@
+# Create a gitlab runner in your namespace with Helm
+
+Install:
+
+Edit runnerconfig.yaml and add your token
+
+```bash
+helm install --namespace ducoterra services-runner -f runnerconfig.yaml gitlab/gitlab-runner
+helm install --namespace ducoterra reese-runner -f runnerconfig.yaml gitlab/gitlab-runner
+```
+
+Uninstall:
+
+```bash
+helm delete --namespace ducoterra services-runner
+```
+
+## Giving the runner access to your namespace
+
+```bash
+kubectl apply -f k8s
+```

k8s/rolebinding.yaml

@@ -0,0 +1,12 @@
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1beta1
+metadata:
+  name: gitlab-runner
+subjects:
+- kind: ServiceAccount
+  name: gitlab-runner
+  apiGroup: ""
+roleRef:
+  kind: ClusterRole
+  name: gitlab-runner
+  apiGroup: ""

k8s/serviceaccount.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: gitlab-runner

runnerconfig.yaml.example

@@ -0,0 +1,57 @@
+# CONFIGURE ME
+runnerRegistrationToken: <PUT YOUR TOKEN HERE>
+gitlabUrl: https://gitlab.ducoterra.net/
+
+# PRE-CONFIGURED
+imagePullPolicy: IfNotPresent
+unregisterRunners: true
+terminationGracePeriodSeconds: 3600
+concurrent: 10
+checkInterval: 30
+rbac:
+  clusterWideAccess: false
+  serviceAccountName: gitlab-runner
+metrics:
+  enabled: true
+runners:
+  image: debian:10
+  locked: false
+  privileged: false
+  pollTimeout: 180
+  outputLimit: 4096
+  cache: {}
+  builds:
+    cpuLimit: 1000m
+    cpuLimitOverwriteMaxAllowed: 2000m
+    memoryLimit: 1Gi
+    memoryLimitOverwriteMaxAllowed: 2Gi
+    cpuRequests: 1m
+    cpuRequestsOverwriteMaxAllowed: 200m
+    memoryRequests: 1Mi
+    memoryRequestsOverwriteMaxAllowed: 256Mi
+  services:
+    cpuLimit: 1000m
+    memoryLimit: 1Gi
+    cpuRequests: 1m
+    memoryRequests: 1Mi
+  helpers:
+    cpuLimit: 1000m
+    memoryLimit: 1Gi
+    cpuRequests: 1m
+    memoryRequests: 1Mi
+securityContext:
+  fsGroup: 65533
+  runAsUser: 100
+resources: {}
+  # limits:
+  #   memory: "1Gi"
+  #   cpu: "1"
+  # requests:
+  #   memory: "1Mi"
+  #   cpu: "1m"
+affinity: {}
+nodeSelector: {}
+tolerations: []
+hostAliases: []
+podAnnotations: {}
+podLabels: {}