helm repo add gitlab-jh https://charts.gitlab.cn
或 helm repo add gitlab https://charts.gitlab.io
helm search repo gitlab-runner --versions
helm pull gitlab-jh/gitlab-runner --version 0.48.0
# cat values.yaml |grep -v "#" |grep -v '^$'
image:
registry: registry.gitlab.com
image: gitlab-org/gitlab-runner
imagePullPolicy: IfNotPresent
gitlabUrl: https://g.vimll.com:9888
runnerRegistrationToken: "XXXXXXXXXXXXXXXXXXXXXX"
terminationGracePeriodSeconds: 3600
concurrent: 10
checkInterval: 30
sessionServer:
enabled: false
rbac:
create: true
clusterWideAccess: true
podSecurityPolicy:
enabled: false
resourceNames:
- gitlab-runner
metrics:
enabled: false
portName: metrics
port: 9252
serviceMonitor:
enabled: false
service:
enabled: false
type: ClusterIP
runners:
config: |
[[runners]]
[runners.kubernetes]
namespace = "{{.Release.Namespace}}"
image = "ubuntu:16.04"
[[runners.kubernetes.volumes.empty_dir]]
name = "docker-certs"
mount_path = "/certs/client"
medium = "Memory"
tags: "k8s"
privileged: true
cache:
cacheType: s3
cachePath: "gitlab_runner"
cacheShared: true
s3ServerAddress: rook-ceph-rgw-s3.rook-ceph
s3BucketName: gitlab-runner
s3BucketLocation:
s3CacheInsecure: true
secretName: s3access
podAnnotations:
sidecar.istio.io/inject: "false"
securityContext:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: false
runAsNonRoot: true
privileged: false
capabilities:
drop: ["ALL"]
podSecurityContext:
runAsUser: 100
fsGroup: 65533
kubectl create secret generic s3access \
--from-literal=accesskey="YourAccessKey" \
--from-literal=secretkey="YourSecretKey"
helm install gitlab-runner -f values.yaml ./
helm upgrade gitlab-runner -f values.yaml ./