use built in chart

clusters/cl01tl/platform/gitea/Chart.yaml

@@ -26,10 +26,6 @@ dependencies:
   - name: gitea
     version: 11.0.0
     repository: https://dl.gitea.io/charts/
-  - name: app-template
-    alias: act-runners
-    repository: https://bjw-s.github.io/helm-charts/
-    version: 3.7.2
   - name: app-template
     alias: renovate
     repository: https://bjw-s.github.io/helm-charts/

clusters/cl01tl/platform/gitea/templates/external-secret.yaml

@@ -78,13 +78,13 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
-    - secretKey: token-1
+    - secretKey: token
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /cl01tl/gitea/runner
         metadataPolicy: None
-        property: token-1
+        property: token
 
 ---
 apiVersion: external-secrets.io/v1beta1

clusters/cl01tl/platform/gitea/values.yaml

@@ -34,6 +34,24 @@ gitea:
     - mountPath: /opt/backup
       name: gitea-nfs-storage-backup
       readOnly: false
+  actions:
+    enabled: true
+    statefulset:
+      resources:
+        requests:
+          cpu: 100m
+          memory: 256Mi
+      actRunner:
+        # See full example here: https://gitea.com/gitea/act_runner/src/branch/main/internal/pkg/config/config.example.yaml
+        config: |
+          log:
+            level: debug
+          cache:
+            enabled: false
+    provisioning:
+        enabled: true
+    existingSecret: gitea-runner-secret
+    existingSecretKey: token
   gitea:
     metrics:
       enabled: true
@@ -130,54 +148,56 @@ gitea:
     enabled: false
   mariadb:
     enabled: false
-act-runners:
+# act-runners:
-  global:
+#   global:
-    nameOverride: gitea-runners
+#     nameOverride: gitea-runners
-  controllers:
+#   defaultPodOptions:
-    runners:
+#     securityContext:
-      type: deployment
+#       fsGroup: 1000
-      replicas: 1
+#       privileged: true
-      strategy: Recreate
+#   controllers:
-      revisionHistoryLimit: 3
+#     runners:
-      containers:
+#       type: deployment
-        # alexlebens/helm-charts
+#       replicas: 1
-        runner-1:
+#       strategy: Recreate
-          image:
+#       revisionHistoryLimit: 3
-            repository: gitea/act_runner
+#       containers:
-            tag: 0.2.10-dind-rootless
+#         # alexlebens/helm-charts
-            pullPolicy: IfNotPresent
+#         runner-1:
-          env:
+#           image:
-            - name: DOCKER_HOST
+#             repository: gitea/act_runner
-              value: tcp://localhost:2376
+#             tag: 0.2.11-dind-rootless
-            - name: DOCKER_CERT_PATH
+#             pullPolicy: IfNotPresent
-              value: /certs/client
+#           env:
-            - name: DOCKER_TLS_VERIFY
+#             - name: DOCKER_HOST
-              value: "1"
+#               value: tcp://localhost:2376
-            - name: GITEA_INSTANCE_URL
+#             - name: DOCKER_CERT_PATH
-              value: http://gitea-http.gitea.svc.cluster.local:3000
+#               value: /certs/client
-            - name: GITEA_RUNNER_REGISTRATION_TOKEN
+#             - name: DOCKER_TLS_VERIFY
-              valueFrom:
+#               value: "0"
-                secretKeyRef:
+#             - name: GITEA_INSTANCE_URL
-                  name: gitea-runner-secret
+#               value: http://gitea-http.gitea.svc.cluster.local:3000
-                  key: token-1
+#             - name: GITEA_RUNNER_REGISTRATION_TOKEN
-          resources:
+#               valueFrom:
-            requests:
+#                 secretKeyRef:
-              cpu: 100m
+#                   name: gitea-runner-secret
-              memory: 256Mi
+#                   key: token-1
-          securityContext:
+#           resources:
-            privileged: true
+#             requests:
-  serviceAccount:
+#               cpu: 100m
-    create: true
+#               memory: 256Mi
-  persistence:
+#   serviceAccount:
-    data-1:
+#     create: true
-      storageClass: ceph-block
+#   persistence:
-      accessMode: ReadWriteOnce
+#     data-1:
-      size: 1Gi
+#       storageClass: ceph-block
-      advancedMounts:
+#       accessMode: ReadWriteOnce
-        runners:
+#       size: 1Gi
-          runner-1:
+#       advancedMounts:
-            - path: /data
+#         runners:
-              readOnly: false
+#           runner-1:
+#             - path: /data
+#               readOnly: false
 renovate:
   global:
     fullnameOverride: gitea-renovate