🚀 github-action-runner-controller

2025-09-17 18:24:14 +02:00 · 2023-07-08 09:35:25 +02:00
parent 71517b519c
commit 3ed66ca074
11 changed files with 199 additions and 0 deletions
--- a/kubernetes/apps/actions-runner-system/actions-runner-controller/app/helmrelease.yaml
+++ b/kubernetes/apps/actions-runner-system/actions-runner-controller/app/helmrelease.yaml
@@ -0,0 +1,32 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helm.toolkit.fluxcd.io/helmrelease_v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: actions-runner-controller
+  namespace: actions-runner-system
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: gha-runner-scale-set-controller
+      version: 0.4.0
+      sourceRef:
+        kind: HelmRepository
+        name: actions-runner-controller
+        namespace: flux-system
+  maxHistory: 2
+  install:
+    createNamespace: true
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    crds: CreateReplace
+    remediation:
+      retries: 3
+  uninstall:
+    keepHistory: false
+  values:
+    fullnameOverride: gha-runner-scale-set-controller
--- a/kubernetes/apps/actions-runner-system/actions-runner-controller/app/kustomization.yaml
+++ b/kubernetes/apps/actions-runner-system/actions-runner-controller/app/kustomization.yaml
@@ -0,0 +1,8 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: actions-runner-system
+resources:
+  - ./helmrelease.yaml
+  - ./secrets.sops.yaml
--- a/kubernetes/apps/actions-runner-system/actions-runner-controller/app/secrets.sops.yaml
+++ b/kubernetes/apps/actions-runner-system/actions-runner-controller/app/secrets.sops.yaml
@@ -0,0 +1,30 @@
+# yamllint disable
+apiVersion: v1
+kind: Secret
+metadata:
+    name: actions-runner-controller-auth-secret
+    namespace: actions-runner-system
+stringData:
+    github_app_id: ENC[AES256_GCM,data:wrVw0yVs,iv:ZGfJy6C3yRdnXonhN5xIVVqFtycW1MI000WdUTzghRM=,tag:F+Z8+BpJrV+dGtW+A0298w==,type:str]
+    github_app_installation_id: ENC[AES256_GCM,data:xli7LTqZGEs=,iv:BRRVqsjBUqzr8YsWpG0uJ/Xau8D3vkWCNv1DxJCf5nY=,tag:Q6+cGhUYOt+O2nO/vNZd1A==,type:str]
+    github_app_private_key: ENC[AES256_GCM,data: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,iv:JAdFM1sQoNzB6vwi20NeaUpiUrUzvud1oyDtccCl75U=,tag:GvYrU6X19agbdG3dvWabhg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHQmtZeUVvaWtSNzZBWHBx
+            VWxYMjY0MlFSVEN0cjhvQUFxVWNHbFB2cndzCkZURTNGQXBXSm8yT0hvWVR0aDVC
+            NmVhRDNaUFh4eWYyUTFqRTZIQ2o5QkUKLS0tIHhuM3lFREZyYnhlZ3JKQUJwVEdX
+            Z3d6U0dVUWhPTDBZcXY4cFNsRGM3cFUKdIPaiHrS/B4zNHpNaxi9zYrOv+HrZ/oP
+            NVkIbemYIYGKhcqSjRy53EQhIimu0q4oCxal6KkXahVB0edysD9JBQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-07-08T07:36:24Z"
+    mac: ENC[AES256_GCM,data:PekWhW0fxXTmE0yrFPfGuuigc9rxjYEH5Aqcy/PrwSu+Qv5sD33s3j3TzuNm8hFEndUnLU5jYfNwgrNaMPiUSLt4TNe7H0+GNYiBY/1DstvrGd3jNUZaarDvmKsDDTS2CIgw9q2rGscT1Px2eCJYUEtVGcFXh4Xxyp4TV7GrmLY=,iv:qRD0sdKNpzSNkxZxxB02ksI8UDKiS7iMh2tgUtFu0Lk=,tag:J2KiMJqf1MQ5ASejKlPJ1Q==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.3
--- a/kubernetes/apps/actions-runner-system/actions-runner-controller/ks.yaml
+++ b/kubernetes/apps/actions-runner-system/actions-runner-controller/ks.yaml
@@ -0,0 +1,40 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: cluster-apps-actions-runner-controller
+  namespace: flux-system
+  labels:
+    substitution.flux.home.arpa/enabled: "true"
+spec:
+  path: ./kubernetes/apps/actions-runner-system/actions-runner-controller/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-ops-kubernetes
+  wait: true
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: cluster-apps-actions-runner-controller-runners
+  namespace: flux-system
+  labels:
+    substitution.flux.home.arpa/enabled: "true"
+spec:
+  dependsOn:
+    - name: cluster-apps-actions-runner-controller
+  path: ./kubernetes/apps/actions-runner-system/actions-runner-controller/runners
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-ops-kubernetes
+  wait: false # no flux ks dependents
+  interval: 30m
+  retryInterval: 1m
+  timeout: 5m
--- a/kubernetes/apps/actions-runner-system/actions-runner-controller/runners/helmrelease.yaml
+++ b/kubernetes/apps/actions-runner-system/actions-runner-controller/runners/helmrelease.yaml
@@ -0,0 +1,53 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/helm.toolkit.fluxcd.io/helmrelease_v2beta1.json
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: arc-home-ops
+  namespace: actions-runner-system
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: gha-runner-scale-set
+      version: 0.4.0
+      sourceRef:
+        kind: HelmRepository
+        name: actions-runner-controller
+        namespace: flux-system
+  maxHistory: 2
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+  uninstall:
+    keepHistory: false
+  values:
+    runnerScaleSetName: arc-runner-set-home-ops
+    githubConfigUrl: https://github.com/auricom/home-ops
+    minRunners: 1
+    maxRunners: 3
+    containerMode:
+      type: dind
+    template:
+      spec:
+        containers:
+          - name: runner
+            image: ghcr.io/onedr0p/github-actions-runner:rolling@sha256:d3aee5104a6fc59b96641d533d3ff07e6af414d42fc0c93d950fa7a4aa126ecd
+  valuesFrom:
+    - kind: Secret
+      name: actions-runner-controller-auth-secret
+      valuesKey: github_app_id
+      targetPath: githubConfigSecret.github_app_id
+    - kind: Secret
+      name: actions-runner-controller-auth-secret
+      valuesKey: github_app_installation_id
+      targetPath: githubConfigSecret.github_app_installation_id
+    - kind: Secret
+      name: actions-runner-controller-auth-secret
+      valuesKey: github_app_private_key
+      targetPath: githubConfigSecret.github_app_private_key
--- a/kubernetes/apps/actions-runner-system/actions-runner-controller/runners/kustomization.yaml
+++ b/kubernetes/apps/actions-runner-system/actions-runner-controller/runners/kustomization.yaml
@@ -0,0 +1,7 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: actions-runner-system
+resources:
+  - ./helmrelease.yaml
--- a/kubernetes/apps/actions-runner-system/kustomization.yaml
+++ b/kubernetes/apps/actions-runner-system/kustomization.yaml
@@ -0,0 +1,9 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  # Pre Flux-Kustomizations
+  - ./namespace.yaml
+  # Flux-Kustomizations
+  - ./actions-runner-controller/ks.yaml
--- a/kubernetes/apps/actions-runner-system/namespace.yaml
+++ b/kubernetes/apps/actions-runner-system/namespace.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: actions-runner-system
+  labels:
+    kustomize.toolkit.fluxcd.io/prune: disabled
--- a/kubernetes/apps/kustomization.yaml
+++ b/kubernetes/apps/kustomization.yaml
@@ -3,6 +3,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - ./actions-runner-system
  - ./cert-manager
  - ./default
  - ./flux-system
--- a/kubernetes/flux/repositories/helm/actions-runner-controller.yaml
+++ b/kubernetes/flux/repositories/helm/actions-runner-controller.yaml
@@ -0,0 +1,11 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.devbu.io/source.toolkit.fluxcd.io/helmrepository_v1beta2.json
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: actions-runner-controller
+  namespace: flux-system
+spec:
+  type: oci
+  interval: 5m
+  url: oci://ghcr.io/actions/actions-runner-controller-charts
--- a/kubernetes/flux/repositories/helm/kustomization.yaml
+++ b/kubernetes/flux/repositories/helm/kustomization.yaml
@@ -3,6 +3,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - ./actions-runner-controller.yaml
  - ./aqua.yaml
  - ./backube.yaml
  - ./bitnami.yaml