feat: allow namespace overrides
This commit is contained in:
		
							parent
							
								
									96d1bbcf2f
								
							
						
					
					
						commit
						b55f57c286
					
				| 
						 | 
				
			
			@ -6,17 +6,17 @@
 | 
			
		|||
  {{- end }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
{{- else if contains "NodePort" .Values.service.type }}
 | 
			
		||||
  export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "actions-runner-controller.fullname" . }})
 | 
			
		||||
  export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
 | 
			
		||||
  export NODE_PORT=$(kubectl get --namespace {{ include "actions-runner-controller.namespace" . }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "actions-runner-controller.fullname" . }})
 | 
			
		||||
  export NODE_IP=$(kubectl get nodes --namespace {{ include "actions-runner-controller.namespace" . }} -o jsonpath="{.items[0].status.addresses[0].address}")
 | 
			
		||||
  echo http://$NODE_IP:$NODE_PORT
 | 
			
		||||
{{- else if contains "LoadBalancer" .Values.service.type }}
 | 
			
		||||
     NOTE: It may take a few minutes for the LoadBalancer IP to be available.
 | 
			
		||||
           You can watch the status of by running 'kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "actions-runner-controller.fullname" . }}'
 | 
			
		||||
  export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ include "actions-runner-controller.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
 | 
			
		||||
           You can watch the status of by running 'kubectl get --namespace {{ include "actions-runner-controller.namespace" . }} svc -w {{ include "actions-runner-controller.fullname" . }}'
 | 
			
		||||
  export SERVICE_IP=$(kubectl get svc --namespace {{ include "actions-runner-controller.namespace" . }} {{ include "actions-runner-controller.fullname" . }} --template "{{"{{ range (index .status.loadBalancer.ingress 0) }}{{.}}{{ end }}"}}")
 | 
			
		||||
  echo http://$SERVICE_IP:{{ .Values.service.port }}
 | 
			
		||||
{{- else if contains "ClusterIP" .Values.service.type }}
 | 
			
		||||
  export POD_NAME=$(kubectl get pods --namespace {{ .Release.Namespace }} -l "app.kubernetes.io/name={{ include "actions-runner-controller.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
 | 
			
		||||
  export CONTAINER_PORT=$(kubectl get pod --namespace {{ .Release.Namespace }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
 | 
			
		||||
  export POD_NAME=$(kubectl get pods --namespace {{ include "actions-runner-controller.namespace" . }} -l "app.kubernetes.io/name={{ include "actions-runner-controller.name" . }},app.kubernetes.io/instance={{ .Release.Name }}" -o jsonpath="{.items[0].metadata.name}")
 | 
			
		||||
  export CONTAINER_PORT=$(kubectl get pod --namespace {{ include "actions-runner-controller.namespace" . }} $POD_NAME -o jsonpath="{.spec.containers[0].ports[0].containerPort}")
 | 
			
		||||
  echo "Visit http://127.0.0.1:8080 to use your application"
 | 
			
		||||
  kubectl --namespace {{ .Release.Namespace }} port-forward $POD_NAME 8080:$CONTAINER_PORT
 | 
			
		||||
  kubectl --namespace {{ include "actions-runner-controller.namespace" . }} port-forward $POD_NAME 8080:$CONTAINER_PORT
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,3 +1,14 @@
 | 
			
		|||
{{/*
 | 
			
		||||
Allow overriding the namespace for the resources.
 | 
			
		||||
*/}}
 | 
			
		||||
{{- define "actions-runner-controller.namespace" -}}
 | 
			
		||||
{{- if .Values.namespaceOverride }}
 | 
			
		||||
  {{- .Values.namespaceOverride }}
 | 
			
		||||
{{- else }}
 | 
			
		||||
  {{- .Release.Namespace }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
 | 
			
		||||
{{/*
 | 
			
		||||
Expand the name of the chart.
 | 
			
		||||
*/}}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: apps/v1
 | 
			
		|||
kind: Deployment
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller-actions-metrics-server.fullname" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
spec:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -5,7 +5,7 @@ apiVersion: networking.k8s.io/v1
 | 
			
		|||
kind: Ingress
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ $fullName }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  {{- with .Values.actionsMetricsServer.ingress.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -10,5 +10,5 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
  - kind: ServiceAccount
 | 
			
		||||
    name: {{ include "actions-runner-controller-actions-metrics-server.serviceAccountName" . }}
 | 
			
		||||
    namespace: {{ .Release.Namespace }}
 | 
			
		||||
    namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ apiVersion: v1
 | 
			
		|||
kind: Secret
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller-actions-metrics-server.secretName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
type: Opaque
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: v1
 | 
			
		|||
kind: Service
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller-actions-metrics-server.fullname" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller-actions-metrics-server.selectorLabels" . | nindent 4 }}
 | 
			
		||||
{{- if .Values.actionsMetricsServer.service.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ apiVersion: v1
 | 
			
		|||
kind: ServiceAccount
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller-actions-metrics-server.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  {{- with .Values.actionsMetricsServer.serviceAccount.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
{{- if and .Values.actionsMetricsServer.enabled .Values.actionsMetrics.serviceMonitor.enable }}
 | 
			
		||||
{{- $servicemonitornamespace := .Values.actionsMetrics.serviceMonitor.namespace | default .Release.Namespace }}
 | 
			
		||||
{{- $servicemonitornamespace := .Values.actionsMetrics.serviceMonitor.namespace | default (include "actions-runner-controller.namespace" .) }}
 | 
			
		||||
apiVersion: monitoring.coreos.com/v1
 | 
			
		||||
kind: ServiceMonitor
 | 
			
		||||
metadata:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -10,5 +10,5 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "actions-runner-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -6,7 +6,7 @@ apiVersion: cert-manager.io/v1
 | 
			
		|||
kind: Issuer
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.selfsignedIssuerName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
spec:
 | 
			
		||||
  selfSigned: {}
 | 
			
		||||
---
 | 
			
		||||
| 
						 | 
				
			
			@ -14,11 +14,11 @@ apiVersion: cert-manager.io/v1
 | 
			
		|||
kind: Certificate
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.servingCertName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
spec:
 | 
			
		||||
  dnsNames:
 | 
			
		||||
  - {{ include "actions-runner-controller.webhookServiceName" . }}.{{ .Release.Namespace }}.svc
 | 
			
		||||
  - {{ include "actions-runner-controller.webhookServiceName" . }}.{{ .Release.Namespace }}.svc.cluster.local
 | 
			
		||||
  - {{ include "actions-runner-controller.webhookServiceName" . }}.{{ include "actions-runner-controller.namespace" . }}.svc
 | 
			
		||||
  - {{ include "actions-runner-controller.webhookServiceName" . }}.{{ include "actions-runner-controller.namespace" . }}.svc.cluster.local
 | 
			
		||||
  issuerRef:
 | 
			
		||||
    kind: Issuer
 | 
			
		||||
    name: {{ include "actions-runner-controller.selfsignedIssuerName" . }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ metadata:
 | 
			
		|||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  name: {{ include "actions-runner-controller.metricsServiceName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  {{- with .Values.metrics.serviceAnnotations }}
 | 
			
		||||
  annotations:
 | 
			
		||||
    {{- toYaml . | nindent 4 }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -8,7 +8,7 @@ metadata:
 | 
			
		|||
    {{- toYaml . | nindent 4 }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  name: {{ include "actions-runner-controller.serviceMonitorName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
spec:
 | 
			
		||||
  endpoints:
 | 
			
		||||
    - path: /metrics
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -5,7 +5,7 @@ metadata:
 | 
			
		|||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  name: {{ include "actions-runner-controller.pdbName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
spec:
 | 
			
		||||
  {{- if .Values.podDisruptionBudget.minAvailable }}
 | 
			
		||||
  minAvailable: {{ .Values.podDisruptionBudget.minAvailable }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,7 +2,7 @@ apiVersion: apps/v1
 | 
			
		|||
kind: Deployment
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.fullname" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
spec:
 | 
			
		||||
| 
						 | 
				
			
			@ -56,7 +56,7 @@ spec:
 | 
			
		|||
        - "--docker-registry-mirror={{ .Values.dockerRegistryMirror }}"
 | 
			
		||||
        {{- end }}
 | 
			
		||||
        {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
        - "--watch-namespace={{ default .Release.Namespace .Values.scope.watchNamespace }}"
 | 
			
		||||
        - "--watch-namespace={{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}"
 | 
			
		||||
        {{- end }}
 | 
			
		||||
        {{- if .Values.logLevel }}
 | 
			
		||||
        - "--log-level={{ .Values.logLevel }}"
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: apps/v1
 | 
			
		|||
kind: Deployment
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller-github-webhook-server.fullname" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
spec:
 | 
			
		||||
| 
						 | 
				
			
			@ -43,7 +43,7 @@ spec:
 | 
			
		|||
        - "--log-level={{ .Values.githubWebhookServer.logLevel }}"
 | 
			
		||||
        {{- end }}
 | 
			
		||||
        {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
        - "--watch-namespace={{ default .Release.Namespace .Values.scope.watchNamespace }}"
 | 
			
		||||
        - "--watch-namespace={{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}"
 | 
			
		||||
        {{- end }}
 | 
			
		||||
        {{- if .Values.runnerGithubURL  }}
 | 
			
		||||
        - "--runner-github-url={{ .Values.runnerGithubURL }}"
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -5,7 +5,7 @@ apiVersion: networking.k8s.io/v1
 | 
			
		|||
kind: Ingress
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ $fullName }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  {{- with .Values.githubWebhookServer.ingress.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -5,7 +5,7 @@ metadata:
 | 
			
		|||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  name: {{ include "actions-runner-controller-github-webhook-server.pdbName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
spec:
 | 
			
		||||
  {{- if .Values.githubWebhookServer.podDisruptionBudget.minAvailable }}
 | 
			
		||||
  minAvailable: {{ .Values.githubWebhookServer.podDisruptionBudget.minAvailable }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -10,5 +10,5 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
  - kind: ServiceAccount
 | 
			
		||||
    name: {{ include "actions-runner-controller-github-webhook-server.serviceAccountName" . }}
 | 
			
		||||
    namespace: {{ .Release.Namespace }}
 | 
			
		||||
    namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ apiVersion: v1
 | 
			
		|||
kind: Secret
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller-github-webhook-server.secretName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
type: Opaque
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: v1
 | 
			
		|||
kind: Service
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller-github-webhook-server.fullname" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller-github-webhook-server.selectorLabels" . | nindent 4 }}
 | 
			
		||||
{{- if .Values.githubWebhookServer.service.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
{{- if and .Values.githubWebhookServer.enabled .Values.metrics.serviceMonitor.enable }}
 | 
			
		||||
{{- $servicemonitornamespace := .Values.actionsMetrics.serviceMonitor.namespace | default .Release.Namespace }}
 | 
			
		||||
{{- $servicemonitornamespace := .Values.actionsMetrics.serviceMonitor.namespace | default (include "actions-runner-controller.namespace" .) }}
 | 
			
		||||
apiVersion: monitoring.coreos.com/v1
 | 
			
		||||
kind: ServiceMonitor
 | 
			
		||||
metadata:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ apiVersion: v1
 | 
			
		|||
kind: ServiceAccount
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller-github-webhook-server.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  {{- with .Values.githubWebhookServer.serviceAccount.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: Role
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.leaderElectionRoleName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
rules:
 | 
			
		||||
- apiGroups:
 | 
			
		||||
  - ""
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: RoleBinding
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.leaderElectionRoleName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
roleRef:
 | 
			
		||||
  apiGroup: rbac.authorization.k8s.io
 | 
			
		||||
  kind: Role
 | 
			
		||||
| 
						 | 
				
			
			@ -10,4 +10,4 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "actions-runner-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -9,4 +9,4 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "actions-runner-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -6,7 +6,7 @@ kind: ClusterRoleBinding
 | 
			
		|||
{{- end }}
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.managerRoleName" . }}-secrets
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
roleRef:
 | 
			
		||||
  apiGroup: rbac.authorization.k8s.io
 | 
			
		||||
  {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
| 
						 | 
				
			
			@ -18,4 +18,4 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "actions-runner-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: v1
 | 
			
		|||
kind: Secret
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.secretName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  {{- if .Values.authSecret.annotations }}
 | 
			
		||||
  annotations:
 | 
			
		||||
    {{ toYaml .Values.authSecret.annotations | nindent 4 }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: v1
 | 
			
		|||
kind: ServiceAccount
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  {{- with .Values.serviceAccount.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,7 +2,7 @@
 | 
			
		|||
We will use a self managed CA if one is not provided by cert-manager
 | 
			
		||||
*/}}
 | 
			
		||||
{{- $ca := genCA "actions-runner-ca" 3650 }}
 | 
			
		||||
{{- $cert := genSignedCert (printf "%s.%s.svc" (include "actions-runner-controller.webhookServiceName" .) .Release.Namespace) nil (list (printf "%s.%s.svc" (include "actions-runner-controller.webhookServiceName" .) .Release.Namespace)) 3650 $ca }}
 | 
			
		||||
{{- $cert := genSignedCert (printf "%s.%s.svc" (include "actions-runner-controller.webhookServiceName" .) (include "actions-runner-controller.namespace" .)) nil (list (printf "%s.%s.svc" (include "actions-runner-controller.webhookServiceName" .) (include "actions-runner-controller.namespace" .))) 3650 $ca }}
 | 
			
		||||
---
 | 
			
		||||
apiVersion: admissionregistration.k8s.io/v1
 | 
			
		||||
kind: MutatingWebhookConfiguration
 | 
			
		||||
| 
						 | 
				
			
			@ -11,7 +11,7 @@ metadata:
 | 
			
		|||
  name: {{ include "actions-runner-controller.fullname" . }}-mutating-webhook-configuration
 | 
			
		||||
  {{- if .Values.certManagerEnabled }}
 | 
			
		||||
  annotations:
 | 
			
		||||
    cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ include "actions-runner-controller.servingCertName" . }}
 | 
			
		||||
    cert-manager.io/inject-ca-from: {{ include "actions-runner-controller.namespace" . }}/{{ include "actions-runner-controller.servingCertName" . }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
webhooks:
 | 
			
		||||
- admissionReviewVersions:
 | 
			
		||||
| 
						 | 
				
			
			@ -19,7 +19,7 @@ webhooks:
 | 
			
		|||
  {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
  namespaceSelector:
 | 
			
		||||
    matchLabels:
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default .Release.Namespace .Values.scope.watchNamespace }}
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  clientConfig:
 | 
			
		||||
    {{- if .Values.admissionWebHooks.caBundle }}
 | 
			
		||||
| 
						 | 
				
			
			@ -29,7 +29,7 @@ webhooks:
 | 
			
		|||
    {{- end }}
 | 
			
		||||
    service:
 | 
			
		||||
      name: {{ include "actions-runner-controller.webhookServiceName" . }}
 | 
			
		||||
      namespace: {{ .Release.Namespace }}
 | 
			
		||||
      namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
      path: /mutate-actions-summerwind-dev-v1alpha1-runner
 | 
			
		||||
  failurePolicy: Fail
 | 
			
		||||
  name: mutate.runner.actions.summerwind.dev
 | 
			
		||||
| 
						 | 
				
			
			@ -50,7 +50,7 @@ webhooks:
 | 
			
		|||
  {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
  namespaceSelector:
 | 
			
		||||
    matchLabels:
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default .Release.Namespace .Values.scope.watchNamespace }}
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  clientConfig:
 | 
			
		||||
    {{- if .Values.admissionWebHooks.caBundle }}
 | 
			
		||||
| 
						 | 
				
			
			@ -60,7 +60,7 @@ webhooks:
 | 
			
		|||
    {{- end }}
 | 
			
		||||
    service:
 | 
			
		||||
      name: {{ include "actions-runner-controller.webhookServiceName" . }}
 | 
			
		||||
      namespace: {{ .Release.Namespace }}
 | 
			
		||||
      namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
      path: /mutate-actions-summerwind-dev-v1alpha1-runnerdeployment
 | 
			
		||||
  failurePolicy: Fail
 | 
			
		||||
  name: mutate.runnerdeployment.actions.summerwind.dev
 | 
			
		||||
| 
						 | 
				
			
			@ -81,7 +81,7 @@ webhooks:
 | 
			
		|||
  {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
  namespaceSelector:
 | 
			
		||||
    matchLabels:
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default .Release.Namespace .Values.scope.watchNamespace }}
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  clientConfig:
 | 
			
		||||
    {{- if .Values.admissionWebHooks.caBundle }}
 | 
			
		||||
| 
						 | 
				
			
			@ -91,7 +91,7 @@ webhooks:
 | 
			
		|||
    {{- end }}
 | 
			
		||||
    service:
 | 
			
		||||
      name: {{ include "actions-runner-controller.webhookServiceName" . }}
 | 
			
		||||
      namespace: {{ .Release.Namespace }}
 | 
			
		||||
      namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
      path: /mutate-actions-summerwind-dev-v1alpha1-runnerreplicaset
 | 
			
		||||
  failurePolicy: Fail
 | 
			
		||||
  name: mutate.runnerreplicaset.actions.summerwind.dev
 | 
			
		||||
| 
						 | 
				
			
			@ -112,7 +112,7 @@ webhooks:
 | 
			
		|||
  {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
  namespaceSelector:
 | 
			
		||||
    matchLabels:
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default .Release.Namespace .Values.scope.watchNamespace }}
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  clientConfig:
 | 
			
		||||
    {{- if .Values.admissionWebHooks.caBundle }}
 | 
			
		||||
| 
						 | 
				
			
			@ -122,7 +122,7 @@ webhooks:
 | 
			
		|||
    {{- end }}
 | 
			
		||||
    service:
 | 
			
		||||
      name: {{ include "actions-runner-controller.webhookServiceName" . }}
 | 
			
		||||
      namespace: {{ .Release.Namespace }}
 | 
			
		||||
      namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
      path: /mutate-runner-set-pod
 | 
			
		||||
  failurePolicy: Fail
 | 
			
		||||
  name: mutate-runner-pod.webhook.actions.summerwind.dev
 | 
			
		||||
| 
						 | 
				
			
			@ -148,7 +148,7 @@ metadata:
 | 
			
		|||
  name: {{ include "actions-runner-controller.fullname" . }}-validating-webhook-configuration
 | 
			
		||||
  {{- if .Values.certManagerEnabled }}
 | 
			
		||||
  annotations:
 | 
			
		||||
    cert-manager.io/inject-ca-from: {{ .Release.Namespace }}/{{ include "actions-runner-controller.servingCertName" . }}
 | 
			
		||||
    cert-manager.io/inject-ca-from: {{ include "actions-runner-controller.namespace" . }}/{{ include "actions-runner-controller.servingCertName" . }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
webhooks:
 | 
			
		||||
- admissionReviewVersions:
 | 
			
		||||
| 
						 | 
				
			
			@ -156,7 +156,7 @@ webhooks:
 | 
			
		|||
  {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
  namespaceSelector:
 | 
			
		||||
    matchLabels:
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default .Release.Namespace .Values.scope.watchNamespace }}
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  clientConfig:
 | 
			
		||||
    {{- if .Values.admissionWebHooks.caBundle }}
 | 
			
		||||
| 
						 | 
				
			
			@ -166,7 +166,7 @@ webhooks:
 | 
			
		|||
    {{- end }}
 | 
			
		||||
    service:
 | 
			
		||||
      name: {{ include "actions-runner-controller.webhookServiceName" . }}
 | 
			
		||||
      namespace: {{ .Release.Namespace }}
 | 
			
		||||
      namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
      path: /validate-actions-summerwind-dev-v1alpha1-runner
 | 
			
		||||
  failurePolicy: Fail
 | 
			
		||||
  name: validate.runner.actions.summerwind.dev
 | 
			
		||||
| 
						 | 
				
			
			@ -187,7 +187,7 @@ webhooks:
 | 
			
		|||
  {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
  namespaceSelector:
 | 
			
		||||
    matchLabels:
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default .Release.Namespace .Values.scope.watchNamespace }}
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  clientConfig:
 | 
			
		||||
    {{- if .Values.admissionWebHooks.caBundle }}
 | 
			
		||||
| 
						 | 
				
			
			@ -197,7 +197,7 @@ webhooks:
 | 
			
		|||
    {{- end }}
 | 
			
		||||
    service:
 | 
			
		||||
      name: {{ include "actions-runner-controller.webhookServiceName" . }}
 | 
			
		||||
      namespace: {{ .Release.Namespace }}
 | 
			
		||||
      namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
      path: /validate-actions-summerwind-dev-v1alpha1-runnerdeployment
 | 
			
		||||
  failurePolicy: Fail
 | 
			
		||||
  name: validate.runnerdeployment.actions.summerwind.dev
 | 
			
		||||
| 
						 | 
				
			
			@ -218,7 +218,7 @@ webhooks:
 | 
			
		|||
  {{- if .Values.scope.singleNamespace }}
 | 
			
		||||
  namespaceSelector:
 | 
			
		||||
    matchLabels:
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default .Release.Namespace .Values.scope.watchNamespace }}
 | 
			
		||||
      kubernetes.io/metadata.name: {{ default (include "actions-runner-controller.namespace" .) .Values.scope.watchNamespace }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  clientConfig:
 | 
			
		||||
    {{- if .Values.admissionWebHooks.caBundle }}
 | 
			
		||||
| 
						 | 
				
			
			@ -228,7 +228,7 @@ webhooks:
 | 
			
		|||
    {{- end }}
 | 
			
		||||
    service:
 | 
			
		||||
      name: {{ include "actions-runner-controller.webhookServiceName" . }}
 | 
			
		||||
      namespace: {{ .Release.Namespace }}
 | 
			
		||||
      namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
      path: /validate-actions-summerwind-dev-v1alpha1-runnerreplicaset
 | 
			
		||||
  failurePolicy: Fail
 | 
			
		||||
  name: validate.runnerreplicaset.actions.summerwind.dev
 | 
			
		||||
| 
						 | 
				
			
			@ -250,7 +250,7 @@ apiVersion: v1
 | 
			
		|||
kind: Secret
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.servingCertName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
type: kubernetes.io/tls
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,7 +2,7 @@ apiVersion: v1
 | 
			
		|||
kind: Service
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "actions-runner-controller.webhookServiceName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "actions-runner-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "actions-runner-controller.labels" . | nindent 4 }}
 | 
			
		||||
  {{- with .Values.service.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -420,3 +420,6 @@ actionsMetricsServer:
 | 
			
		|||
    #      - chart-example.local
 | 
			
		||||
  terminationGracePeriodSeconds: 10
 | 
			
		||||
  lifecycle: {}
 | 
			
		||||
 | 
			
		||||
# Add the option to deploy in another namespace rather than .Release.Namespace.
 | 
			
		||||
namespaceOverride: ""
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -7,6 +7,17 @@ Expand the name of the chart.
 | 
			
		|||
gha-rs-controller
 | 
			
		||||
{{- end }}
 | 
			
		||||
 | 
			
		||||
{{/*
 | 
			
		||||
Allow overriding the namespace for the resources.
 | 
			
		||||
*/}}
 | 
			
		||||
{{- define "gha-runner-scale-set-controller.namespace" -}}
 | 
			
		||||
{{- if .Values.namespaceOverride }}
 | 
			
		||||
  {{- .Values.namespaceOverride }}
 | 
			
		||||
{{- else }}
 | 
			
		||||
  {{- .Release.Namespace }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
 | 
			
		||||
{{- define "gha-runner-scale-set-controller.name" -}}
 | 
			
		||||
{{- default (include "gha-base-name" .) .Values.nameOverride | trunc 63 | trimSuffix "-" }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			@ -57,7 +68,7 @@ Selector labels
 | 
			
		|||
*/}}
 | 
			
		||||
{{- define "gha-runner-scale-set-controller.selectorLabels" -}}
 | 
			
		||||
app.kubernetes.io/name: {{ include "gha-runner-scale-set-controller.name" . }}
 | 
			
		||||
app.kubernetes.io/namespace: {{ .Release.Namespace }}
 | 
			
		||||
app.kubernetes.io/namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
app.kubernetes.io/instance: {{ .Release.Name }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,10 +2,10 @@ apiVersion: apps/v1
 | 
			
		|||
kind: Deployment
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.fullname" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "gha-runner-scale-set-controller.labels" . | nindent 4 }}
 | 
			
		||||
    actions.github.com/controller-service-account-namespace: {{ .Release.Namespace }}
 | 
			
		||||
    actions.github.com/controller-service-account-namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
    actions.github.com/controller-service-account-name: {{ include "gha-runner-scale-set-controller.serviceAccountName" . }}
 | 
			
		||||
    {{- if .Values.flags.watchSingleNamespace }}
 | 
			
		||||
    actions.github.com/controller-watch-single-namespace: {{ .Values.flags.watchSingleNamespace }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: Role
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.leaderElectionRoleName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
rules:
 | 
			
		||||
  - apiGroups: ["coordination.k8s.io"]
 | 
			
		||||
    resources: ["leases"]
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: RoleBinding
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.leaderElectionRoleBinding" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
roleRef:
 | 
			
		||||
  apiGroup: rbac.authorization.k8s.io
 | 
			
		||||
  kind: Role
 | 
			
		||||
| 
						 | 
				
			
			@ -11,5 +11,5 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			@ -10,5 +10,5 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: Role
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.managerListenerRoleName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
rules:
 | 
			
		||||
- apiGroups:
 | 
			
		||||
  - ""
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: RoleBinding
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.managerListenerRoleBinding" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
roleRef:
 | 
			
		||||
  apiGroup: rbac.authorization.k8s.io
 | 
			
		||||
  kind: Role
 | 
			
		||||
| 
						 | 
				
			
			@ -10,4 +10,4 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: Role
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.managerSingleNamespaceRoleName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
rules:
 | 
			
		||||
- apiGroups:
 | 
			
		||||
  - actions.github.com
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: RoleBinding
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.managerSingleNamespaceRoleBinding" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
roleRef:
 | 
			
		||||
  apiGroup: rbac.authorization.k8s.io
 | 
			
		||||
  kind: Role
 | 
			
		||||
| 
						 | 
				
			
			@ -11,5 +11,5 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			@ -11,5 +11,5 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: v1
 | 
			
		|||
kind: ServiceAccount
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set-controller.serviceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set-controller.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "gha-runner-scale-set-controller.labels" . | nindent 4 }}
 | 
			
		||||
  {{- with .Values.serviceAccount.annotations }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -130,3 +130,6 @@ flags:
 | 
			
		|||
  ## Labels that match prefix specified in the list are excluded from propagation.
 | 
			
		||||
  # excludeLabelPropagationPrefixes:
 | 
			
		||||
  #   - "argocd.argoproj.io/instance"
 | 
			
		||||
 | 
			
		||||
# Add the option to deploy in another namespace rather than .Release.Namespace.
 | 
			
		||||
namespaceOverride: ""
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -43,7 +43,7 @@ app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
 | 
			
		|||
app.kubernetes.io/managed-by: {{ .Release.Service }}
 | 
			
		||||
app.kubernetes.io/part-of: gha-rs
 | 
			
		||||
actions.github.com/scale-set-name: {{ include "gha-runner-scale-set.scale-set-name" . }}
 | 
			
		||||
actions.github.com/scale-set-namespace: {{ .Release.Namespace }}
 | 
			
		||||
actions.github.com/scale-set-namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
 | 
			
		||||
{{/*
 | 
			
		||||
| 
						 | 
				
			
			@ -481,8 +481,8 @@ volumeMounts:
 | 
			
		|||
      {{- $managerServiceAccountName = (get $controllerDeployment.metadata.labels "actions.github.com/controller-service-account-name") }}
 | 
			
		||||
    {{- end }}
 | 
			
		||||
  {{- else if gt $singleNamespaceCounter 0 }}
 | 
			
		||||
    {{- if hasKey $singleNamespaceControllerDeployments .Release.Namespace }}
 | 
			
		||||
      {{- $controllerDeployment = get $singleNamespaceControllerDeployments .Release.Namespace }}
 | 
			
		||||
    {{- if hasKey $singleNamespaceControllerDeployments (include "gha-runner-scale-set.namespace" .) }}
 | 
			
		||||
      {{- $controllerDeployment = get $singleNamespaceControllerDeployments (include "gha-runner-scale-set.namespace" .) }}
 | 
			
		||||
      {{- with $controllerDeployment.metadata }}
 | 
			
		||||
        {{- $managerServiceAccountName = (get $controllerDeployment.metadata.labels "actions.github.com/controller-service-account-name") }}
 | 
			
		||||
      {{- end }}
 | 
			
		||||
| 
						 | 
				
			
			@ -538,8 +538,8 @@ volumeMounts:
 | 
			
		|||
      {{- $managerServiceAccountNamespace = (get $controllerDeployment.metadata.labels "actions.github.com/controller-service-account-namespace") }}
 | 
			
		||||
    {{- end }}
 | 
			
		||||
  {{- else if gt $singleNamespaceCounter 0 }}
 | 
			
		||||
    {{- if hasKey $singleNamespaceControllerDeployments .Release.Namespace }}
 | 
			
		||||
      {{- $controllerDeployment = get $singleNamespaceControllerDeployments .Release.Namespace }}
 | 
			
		||||
    {{- if hasKey $singleNamespaceControllerDeployments (include "gha-runner-scale-set.namespace" .) }}
 | 
			
		||||
      {{- $controllerDeployment = get $singleNamespaceControllerDeployments (include "gha-runner-scale-set.namespace" .) }}
 | 
			
		||||
      {{- with $controllerDeployment.metadata }}
 | 
			
		||||
        {{- $managerServiceAccountNamespace = (get $controllerDeployment.metadata.labels "actions.github.com/controller-service-account-namespace") }}
 | 
			
		||||
      {{- end }}
 | 
			
		||||
| 
						 | 
				
			
			@ -553,3 +553,11 @@ volumeMounts:
 | 
			
		|||
{{- $managerServiceAccountNamespace }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
 | 
			
		||||
{{- define "gha-runner-scale-set.namespace" -}}
 | 
			
		||||
{{- if .Values.namespaceOverride }}
 | 
			
		||||
  {{- .Values.namespaceOverride }}
 | 
			
		||||
{{- else }}
 | 
			
		||||
  {{- .Release.Namespace }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,11 +4,11 @@ metadata:
 | 
			
		|||
  {{- if or (not (include "gha-runner-scale-set.scale-set-name" .)) (gt (len (include "gha-runner-scale-set.scale-set-name" .)) 45) }}
 | 
			
		||||
  {{ fail "Name must have up to 45 characters" }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  {{- if gt (len .Release.Namespace) 63 }}
 | 
			
		||||
  {{- if gt (len (include "gha-runner-scale-set.namespace" .)) 63 }}
 | 
			
		||||
  {{ fail "Namespace must have up to 63 characters" }}
 | 
			
		||||
  {{- end }}
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.scale-set-name" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    app.kubernetes.io/component: "autoscaling-runner-set"
 | 
			
		||||
    {{- include "gha-runner-scale-set.labels" . | nindent 4 }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -3,7 +3,7 @@ apiVersion: v1
 | 
			
		|||
kind: Secret
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.githubsecret" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "gha-runner-scale-set.labels" . | nindent 4 }}
 | 
			
		||||
  finalizers:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -5,7 +5,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: Role
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.kubeModeRoleName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
  finalizers:
 | 
			
		||||
    - actions.github.com/cleanup-protection
 | 
			
		||||
rules:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: RoleBinding
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.kubeModeRoleBindingName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
  finalizers:
 | 
			
		||||
    - actions.github.com/cleanup-protection
 | 
			
		||||
roleRef:
 | 
			
		||||
| 
						 | 
				
			
			@ -14,5 +14,5 @@ roleRef:
 | 
			
		|||
subjects:
 | 
			
		||||
- kind: ServiceAccount
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.kubeModeServiceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
{{- end }}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ apiVersion: v1
 | 
			
		|||
kind: ServiceAccount
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.kubeModeServiceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
  {{- if .Values.containerMode.kubernetesModeServiceAccount }}
 | 
			
		||||
  {{- with .Values.containerMode.kubernetesModeServiceAccount.annotations }}
 | 
			
		||||
  annotations:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: Role
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.managerRoleName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "gha-runner-scale-set.labels" . | nindent 4 }}
 | 
			
		||||
    app.kubernetes.io/component: manager-role
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,7 +2,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 | 
			
		|||
kind: RoleBinding
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.managerRoleBindingName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "gha-runner-scale-set.labels" . | nindent 4 }}
 | 
			
		||||
    app.kubernetes.io/component: manager-role-binding
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -4,7 +4,7 @@ apiVersion: v1
 | 
			
		|||
kind: ServiceAccount
 | 
			
		||||
metadata:
 | 
			
		||||
  name: {{ include "gha-runner-scale-set.noPermissionServiceAccountName" . }}
 | 
			
		||||
  namespace: {{ .Release.Namespace }}
 | 
			
		||||
  namespace: {{ include "gha-runner-scale-set.namespace" . }}
 | 
			
		||||
  labels:
 | 
			
		||||
    {{- include "gha-runner-scale-set.labels" . | nindent 4 }}
 | 
			
		||||
  finalizers:
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -201,3 +201,6 @@ template:
 | 
			
		|||
# controllerServiceAccount:
 | 
			
		||||
#   namespace: arc-system
 | 
			
		||||
#   name: test-arc-gha-runner-scale-set-controller
 | 
			
		||||
 | 
			
		||||
# Add the option to deploy in another namespace rather than .Release.Namespace.
 | 
			
		||||
namespaceOverride: ""
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
		Reference in New Issue