Skip to content

Instantly share code, notes, and snippets.

@ericbisme
Last active January 27, 2020 20:42
Show Gist options
  • Save ericbisme/5bbfa6179294ca52858934d2feb1f0e0 to your computer and use it in GitHub Desktop.
Save ericbisme/5bbfa6179294ca52858934d2feb1f0e0 to your computer and use it in GitHub Desktop.
Kubernetes Job to deploy gitlab-runner from a helm chart
# Initialize a gitlab-runner in a utility namespace dedicated to customer namespace
# Designed to faciliate customer self-service to their namespace(s) via GitLab
---
apiVersion: batch/v1
kind: Job
metadata:
name: deploy-gitlab-runner-<customer>-<namespace>
spec:
ttlSecondsAfterFinished: 100
template:
spec:
containers:
- name: gitlab-bootstrap-customer
image: praqma/helmsman:v1.7.3-rc-helm-v2.11.0
command: ["bash", "-c"]
args: >- [
kubectl config set-cluster default --server=https://kubernetes.default
--certificate-authority=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
&& kubectl config set-context default --cluster=default
&& token=$(cat /var/run/secrets/kubernetes.io/serviceaccount/token)
&& kubectl config set-credentials user --token=$token
&& kubectl config set-context default --user=user
&& kubectl config use-context default
&& init --client-only
&& helm fetch --untar --repo https://charts.gitlab.io gitlab-runner
&& helm template gitlab-runner -n gitlab-runner-customer --namespace <utility-namespace>
--set imagePullPolicy=IfNotPresent
--set gitlabUrl=http://gitlab.your-domain.com/
--set runnerRegistrationToken=""
--set concurrent=1
--set checkInterval=30
--set rbac.create=false
--set rbac.clusterWideAccess=false
--set metrics.enabled=true
--set runners.image=ubuntu:16.04
--set runners.privileged=false
--set runners.locked=true
--set runners.serviceAccountName=<helm-customer-namespace>
--set envVars.KUBERNETES_NAMESPACE_OVERWRITE_ALLOWED={name: KUBERNETES_NAMESPACE_OVERWRITE_ALLOWED, value: ^customer-.*}
--set envVars.KUBERNETES_SERVICE_ACCOUNT_OVERWRITE_ALLOWED={name: KUBERNETES_SERVICE_ACCOUNT_OVERWRITE_ALLOWED, value: ^helm-customer-namespace-.*}
| kubectl apply -f -
]
restartPolicy: Never
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment