gitlab-runner values.yaml¶
istio.enabled¶
Type: bool
Default value
false
istio.injection¶
Type: string
Default value
"disabled"
istio.hardened.enabled¶
Type: bool
Default value
false
istio.hardened.outboundTrafficPolicyMode¶
Type: string
Default value
"REGISTRY_ONLY"
istio.hardened.customServiceEntries¶
Type: list
Default value
[]
istio.hardened.customAuthorizationPolicies¶
Type: list
Default value
[]
istio.hardened.gitlab.enabled¶
Type: bool
Default value
true
istio.hardened.gitlab.namespaces[0]¶
Type: string
Default value
"gitlab"
istio.hardened.monitoring.enabled¶
Type: bool
Default value
true
istio.hardened.monitoring.namespaces[0]¶
Type: string
Default value
"monitoring"
istio.hardened.monitoring.principals[0]¶
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-grafana"
istio.hardened.monitoring.principals[1]¶
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-alertmanager"
istio.hardened.monitoring.principals[2]¶
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-operator"
istio.hardened.monitoring.principals[3]¶
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-prometheus"
istio.hardened.monitoring.principals[4]¶
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-kube-state-metrics"
istio.hardened.monitoring.principals[5]¶
Type: string
Default value
"cluster.local/ns/monitoring/sa/monitoring-monitoring-prometheus-node-exporter"
istio.mtls¶
Type: object
Default value
mode: STRICT
Description: Default peer authentication
istio.mtls.mode¶
Type: string
Default value
"STRICT"
Description: STRICT = Allow only mutual TLS traffic, PERMISSIVE = Allow both plain text and mutual TLS traffic
monitoring.enabled¶
Type: bool
Default value
false
networkPolicies.enabled¶
Type: bool
Default value
false
networkPolicies.egress.from.gitlab-runner.podSelector.matchLabels.app¶
Type: string
Default value
"gitlab-runner"
networkPolicies.egress.from.gitlab-runner.to.k8s.gitlab/*¶
Type: bool
Default value
true
networkPolicies.egress.from.gitlab-runner.to.definition.kubeAPI¶
Type: bool
Default value
true
networkPolicies.ingress.to.gitlab-runner:9252.podSelector.matchLabels.app¶
Type: string
Default value
"gitlab-runner"
networkPolicies.ingress.to.gitlab-runner:9252.from.k8s.monitoring-monitoring-kube-prometheus@monitoring/prometheus¶
Type: bool
Default value
false
networkPolicies.additionalPolicies¶
Type: list
Default value
[]
autoRegister.enabled¶
Type: bool
Default value
false
autoRegister.selectorLabels¶
Type: object
Default value
{}
bbtests.enabled¶
Type: bool
Default value
false
bbtests.cypress.artifacts¶
Type: bool
Default value
true
bbtests.cypress.envs.cypress_url¶
Type: string
Default value
"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181"
bbtests.cypress.envs.cypress_gitlab_project¶
Type: string
Default value
"runner-hello-world"
bbtests.cypress.secretEnvs[0].name¶
Type: string
Default value
"cypress_adminpassword"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.name¶
Type: string
Default value
"gitlab-gitlab-initial-root-password"
bbtests.cypress.secretEnvs[0].valueFrom.secretKeyRef.key¶
Type: string
Default value
"password"
openshift¶
Type: bool
Default value
false
upstream.fullnameOverride¶
Type: string
Default value
"gitlab-runner"
upstream.image.registry¶
Type: string
Default value
"registry1.dso.mil"
upstream.image.image¶
Type: string
Default value
"gitlab/gitlab-org/gitlab-runner"
upstream.image.tag¶
Type: string
Default value
"ubi-fips-v19.2.2"
upstream.gitlabUrl¶
Type: string
Default value
"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181"
upstream.concurrent¶
Type: int
Default value
50
upstream.rbac.create¶
Type: bool
Default value
true
upstream.metrics.portName¶
Type: string
Default value
"http-metrics"
upstream.service.enabled¶
Type: bool
Default value
true
upstream.runners.job.registry¶
Type: string
Default value
"registry1.dso.mil"
upstream.runners.job.repository¶
Type: string
Default value
"ironbank/redhat/ubi/ubi9"
upstream.runners.job.tag¶
Type: string
Default value
"9.8"
upstream.runners.helper.registry¶
Type: string
Default value
"registry1.dso.mil"
upstream.runners.helper.repository¶
Type: string
Default value
"gitlab/gitlab-org/gitlab-runner/gitlab-runner-helper"
upstream.runners.helper.tag¶
Type: string
Default value
"ubi-fips-x86_64-v19.2.2"
upstream.runners.config¶
Type: string
Default value
"[[runners]]\n clone_url = \"http://gitlab-webservice-default.gitlab.svc.cluster.local:8181\"\n cache_dir = \"/tmp/gitlab-runner/cache\"\n environment = [\"HOME=/build_home\"]\n [runners.kubernetes]\n pull_policy = \"always\"\n namespace = \"{{.Release.Namespace}}\"\n image = \"{{ printf \"%s/%s:%s\" .Values.runners.job.registry .Values.runners.job.repository .Values.runners.job.tag }}\"\n helper_image = \"{{ printf \"%s/%s:%s\" .Values.runners.helper.registry .Values.runners.helper.repository .Values.runners.helper.tag }}\"\n image_pull_secrets = [\"private-registry\"]\n [runners.kubernetes.pod_security_context]\n run_as_non_root = true\n run_as_user = 1001\n fs_group = 1001\n [runners.kubernetes.helper_container_security_context]\n run_as_non_root = true\n run_as_user = 1001\n [runners.kubernetes.pod_labels]\n \"job_id\" = \"${CI_JOB_ID}\"\n \"job_name\" = \"${CI_JOB_NAME}\"\n \"pipeline_id\" = \"${CI_PIPELINE_ID}\"\n \"app\" = \"gitlab-runner\"\n \"app.kubernetes.io/name\" = \"gitlab-runner\"\n \"app.kubernetes.io/version\" = \"{{ .Chart.AppVersion }}\"\n [[runners.kubernetes.volumes.empty_dir]]\n name = \"build-home\"\n mount_path = \"/build_home\"\n"
upstream.securityContext.runAsUser¶
Type: int
Default value
1001
upstream.securityContext.runAsGroup¶
Type: int
Default value
1001
upstream.podSecurityContext.runAsUser¶
Type: int
Default value
1001
upstream.podSecurityContext.runAsNonRoot¶
Type: bool
Default value
true
upstream.resources.limits.memory¶
Type: string
Default value
"256Mi"
upstream.resources.limits.cpu¶
Type: string
Default value
"200m"
upstream.resources.requests.memory¶
Type: string
Default value
"256Mi"
upstream.resources.requests.cpu¶
Type: string
Default value
"200m"