fix(gitea-runner): enable egress and comment sysctl change

deedee-ops · Jan 14, 2024 · d62deb1 · d62deb1
1 parent d924268
commit d62deb1
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/kubernetes/apps/workers/gitea-runner/values.yaml b/kubernetes/apps/workers/gitea-runner/values.yaml
@@ -1,6 +1,9 @@
 ---
 app-template:
   defaultPodOptions:
+    labels:
+      # fetching docker images and artifacts for builds
+      egress/enabled: "true"
     securityContext:
       runAsUser: 1000
       runAsGroup: 1000

diff --git a/talos/deedee/talconfig.yaml b/talos/deedee/talconfig.yaml
@@ -292,6 +292,7 @@ controlPlane:
           # cloudflared post-quantum QUIC requirement: https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes
           net.core.rmem_max: 2500000
           net.core.wmem_max: 2500000
+          # DIND docker for gitea runners needs this to be increased
           user.max_user_namespaces: 32768
 
     # secureboot

diff --git a/talos/dexter/talconfig.yaml b/talos/dexter/talconfig.yaml
@@ -223,6 +223,7 @@ controlPlane:
           # cloudflared post-quantum QUIC requirement: https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes
           net.core.rmem_max: 2500000
           net.core.wmem_max: 2500000
+          # DIND docker for gitea runners needs this to be increased
           user.max_user_namespaces: 32768
 
     # Enable K8s Talos API Access