auto runner registration

apps/zurrli/forgejo-runner/deployment.yaml

@@ -16,6 +16,38 @@ spec:
         app: forgejo-runner
     spec:
       restartPolicy: Always
+      initContainers:
+      - name: registration
+        image: code.forgejo.org/forgejo/runner:3.3.0
+        command:
+          [
+            "sh",
+            "-c",
+            "if ! [ -f /data/.runner ]; then forgejo-runner register --no-interactive --token ${RUNNER_REGISTRATION_TOKEN} --labels ${LABELS} --name ${RUNNER_NAME} --instance ${INSTANCE_URL}; fi",
+          ]
+        env:
+        - name: INSTANCE_URL
+          value: https://git.tbrnt.ch/
+        - name: RUNNER_NAME
+          value: zurrli-runner
+        - name: LABELS
+          value: ubuntu-latest,ubuntu-22.04,docker
+        - name: RUNNER_REGISTRATION_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: runner-secret
+              key: token
+        volumeMounts:
+        - name: docker-certs
+          mountPath: /certs
+        - name: runner-data
+          mountPath: /data
+        - name: runner-config
+          mountPath: /config
+        resources:
+          limits:
+            cpu: "1"
+            memory: "1024Mi"
       containers:
       - name: runner
         image: code.forgejo.org/forgejo/runner:3.3.0

apps/zurrli/forgejo-runner/secret.sops.yaml

@@ -4,7 +4,7 @@ metadata:
     name: runner-secret
 type: Opaque
 stringData:
-    token: ENC[AES256_GCM,data:ng+g1FDKTlqwXt+AHyvYjwF7yZlu0+A2EMjsJfSKY0/SSv6ZuvfrDg==,iv:P8qdyjgHf9rapO+LQdSTahgvUsiZV90Llex8NuOBDjY=,tag:gUWJEyb5EF6kjqA6hcNryA==,type:str]
+    token: ENC[AES256_GCM,data:eFYg+NVKCEw9rqgkfXX4de3WqqOEUI4c8nw2PbMD1/M8PRxRbAX3wg==,iv:HUuD7w5yHe30UH+jW9zoqbjeRiWyWwEyFzP8UqoTanU=,tag:50h7Ve5s0M6u+xjTCOSt5g==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -14,14 +14,14 @@ sops:
         - recipient: age1dfk8euu7afvw7ge5l2qek45z23hdq5anjd56cy4d7kcsf0e0e5pqfjylx8
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYZWlPUUxWVEdDMzAwVlY2
-            d3RISlJsMkhtUXZCaWhFUUY0SHQzV3A3bFVZCjQ1bkVJeWtPZ1hUaCtnM0l3aU5N
-            RnZiRzRseUJONkh4M1JsbEJobW1hMjQKLS0tIFIrNXk2N0xDT2xUWUFWU0RYb29o
-            eU1PR3poellaYUNrTlAvekVzMkgzMG8K98esBYHqoB6sjwGsW75nvG1dni5tMQ3F
-            KqULsPMNCbJWUd74PVVtMTwSwda7Emxe1Xa0e1EXBQ535yGbjDEXmQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA2RWtDTmVRdEhEZ2ZkR3lR
+            RXBIV1ZjOHV4VFJhQXY5L0ZkMndLZWhhVlY4CnF1TGdPN0o1ZkVGMUVVYytVeTdN
+            QkpIZDZoV0hnWUxuOFNRdzg4U25zOW8KLS0tIEUxU1dVd3EyMVRReUdGZmJqNlhu
+            MGhFVFk3blpROHRMdkh2SmdiVHJNbkEK+ZG9P2xpzQL4mxh/dhWzqCVBK+EAf/tL
+            q8/XO6vJQN07g9ylgDIBgbsSP3g4MqLk/YXp7Sl0xJFra8zxIHjmEg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-02-08T20:20:41Z"
-    mac: ENC[AES256_GCM,data:MxoploRD/RDbAwcWjfy6zBkcuS8YwqLegFQQ70odsjFa5KZm0ml2+wUuXk7/AEH2ZkTpa5bH7741jgpSJPsWZRcYGkn6ZLCjUSHC71zlRZi3caGMyqI7nP72XeYhE6mJRZwhIJkX86QauY+Coojz9XcBWl79tn3ZtPVS3ACUk5w=,iv:Nu2kXawA9lVDwQTX6I245Mokd5C9PMlSE9hIIP6Tplg=,tag:ZaoM2gUzBA0lph6ENc2lCw==,type:str]
+    lastmodified: "2024-02-08T20:42:12Z"
+    mac: ENC[AES256_GCM,data:6R6f66uRwwGNlYsNe+Ow2bDUy5xuHFNI5Pqs2gQNEISuwYmgyU6F3oXO03ZHRyRNfL0ENhSdALXSALcImiHtRXU52X8Esju8MxAa3ZpIWoDtoOC2HUecPKFINsapQMW9U47J7C/2+yRnelXrN0u0l9t3gCPT00VpObyLOKXWAn4=,iv:IgdZGWFmECF7kBAg7a1CiDMceWYpUBT8zplrpEUBJck=,tag:7k1c9WHujg0b8a7JD8ARvg==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.8.1