brooktrails/forgejo-runner-operator
Watch
1
0
Fork
You've already forked forgejo-runner-operator
 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

feat: add forgejo-runner-tofu image and env/envFrom feature it will use #45

Merged
rcsheets merged 2 commits from feat/runner-tofu-image into main 2026-07-08 08:25:13 +00:00
Conversation 1 Commits 2 Files changed 7 +328 -10
rcsheets commented 2026-07-08 08:13:52 +00:00
Owner
Copy link
No description provided. 
A non-DinD, host-mode runner image carrying the OpenTofu CLI (pinned
TOFU_VERSION) alongside the lifted forgejo-runner binary, mirroring the
forgejo-runner-go pattern. For RunnerPools that run `tofu plan`/`apply`
directly in the runner pod -- OpenTofu needs no Docker daemon, only the CLI
plus network egress to the provider registry, OpenBao, and target APIs.

Wired into the Makefile (RUNNER_TOFU_IMAGE, RUNNER_TOFU_VERSION,
RUNNER_ALPINE_VERSION, container-build-runner-tofu) and the runner-images
registry table. First consumer: brooktrails/infra DNS tofu CI.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
feat(kubernetes): thread env/envFrom into the runner container
All checks were successful
CI (next Go) / next-go (tip) (pull_request) Successful in 4m28s
Details
CI / ci (pull_request) Successful in 1m59s
Details
E2E smoke test / e2e (pull_request) Successful in 3m58s
Details
a53341bb7f 
Add spec.backend.kubernetes.env and .envFrom (native corev1 types) to
RunnerPool, applied to the runner container. In non-privileged (host-mode)
pools the job steps execute in that container, so this is how a pool threads
a credential -- e.g. an ESO-synced Secret -- into its workflows without a
per-job OpenBao bootstrap step. DOCKER_HOST for privileged pools is preserved
and user env is appended after it.

First consumer: brooktrails/infra DNS tofu CI, which needs its state-backend
credential present at `tofu init` (before the vault provider is available).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
pr-reviewer-bot commented 2026-07-08 08:13:53 +00:00
Collaborator
Copy link

Automated review by pr-reviewer v0.31.0 | Safety Check | Mistral Small | tracking id r-4e06c1-92552a
This is an AI-generated review and may contain mistakes.

Status: ⚠️ Unavailable

Review unavailable — the inference service isn't reachable right now. This isn't a problem with your PR. Tracking id r-4e06c1-92552a.

Comment @pr-reviewer-bot retry once it's back.

*Automated review by [pr-reviewer](https://git.brooktrails.org/brooktrails/pr-reviewer) v0.31.0 | Safety Check | Mistral Small | tracking id `r-4e06c1-92552a`* *This is an AI-generated review and may contain mistakes.* **Status:** ⚠️ Unavailable --- Review unavailable — the inference service isn't reachable right now. This isn't a problem with your PR. Tracking id `r-4e06c1-92552a`. Comment `@pr-reviewer-bot retry` once it's back.
rcsheets deleted branch feat/runner-tofu-image 2026-07-08 08:25:14 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
brooktrails/forgejo-runner-operator!45
No description provided.