actions-runner-controller/charts/gha-runner-scale-set-controller-experimental/values.yaml

# Global chart-level labels applied to all resources (Deployment, RBAC, etc.).
labels: {}

# Overrides the default `.Release.Namespace` for all resources in this chart.
namespaceOverride: ""

# Optional imagePullSecrets added to the controller Pod spec.
# When set, the manager container also receives `--auto-scaler-image-pull-secrets=<name>` args.
imagePullSecrets: []

controller:
  # Number of controller replicas.
  replicaCount: 1

  # Deployment-level metadata
  metadata:
    labels: {}
    annotations: {}

  manager:
    config:
      # Log level: "debug", "info", "warn", "error".
      logLevel: "debug"
      # Log format: "text", "json".
      logFormat: "text"

      # Restricts the controller to only watch resources in the desired namespace.
      # Defaults to watch all namespaces when unset.
      watchSingleNamespace: ""

      # The maximum number of concurrent reconciles for each controller, set directly
      # per controller.
      autoscalingRunnerSetMaxConcurrentReconciles: 2
      autoscalingListenerMaxConcurrentReconciles: 2
      ephemeralRunnerSetMaxConcurrentReconciles: 2
      # The EphemeralRunner controller is higher because it is the only one of the four that
      # routinely has many distinct objects to reconcile at once, one per runner.
      # controller-runtime serialises reconciles per object, so extra workers on the other
      # three only pay off when many runner scale sets exist.
      ephemeralRunnerMaxConcurrentReconciles: 4

      # How long a runner pod whose containers have all exited is kept before it is deleted.
      # Zero, the default, removes the pod as soon as its job is over instead of leaving it
      # Terminating while the kubelet cleans up locally, handing its name, its scheduling slot
      # and its share of any ResourceQuota straight to the runner replacing it. Raise it to keep
      # finished pods around for longer, for example to give a log collector time to read them.
      # A negative value leaves the pod's own terminationGracePeriodSeconds in charge. Pods that
      # are still running are always deleted gracefully.
      terminatedRunnerPodGracePeriodSeconds: null

      # List of label prefixes that should NOT be propagated to internal resources.
      excludeLabelPropagationPrefixes: []
      # Example:
      # excludeLabelPropagationPrefixes:
      #   - "argocd.argoproj.io/instance"

      # K8s client rate limiter parameters.
      k8sClientRateLimiterQPS: null
      k8sClientRateLimiterBurst: null

      ## Workqueue rate limiter configuration.
      ## By default, controller-runtime uses a combined rate limiter with both a per-item
      ## exponential backoff and an overall token bucket (10 QPS, 100 bucket size).
      ## Valid names: "bucket_rate_limiter" (default), "typed_rate_limiter" (per-item only, no global token bucket).
      # rateLimiter:
      #   name: "bucket_rate_limiter"

      # The address the health probe endpoint binds to. Disabled if empty/null.
      # When set, liveness and readiness probes are added to the controller pod.
      # healthProbeBindAddress: ":8081"

    container:
      image: "ghcr.io/actions/gha-runner-scale-set-controller:latest"
      pullPolicy: IfNotPresent
      # Extra arguments appended to the default set generated by the chart.
      extraArgs: []
      # Container-level environment variables.
      env: []
      # Container-level security context.
      securityContext: {}
      # Container-level resource requests/limits.
      resources: {}
      # Extra container ports (metrics port is derived from controller.metrics).
      extraPorts: []

  serviceAccount:
    # Specifies whether a service account should be created.
    create: true
    # Annotations to add to the service account.
    annotations: {}
    # The name of the service account to use.
    # If not set and create is true, a name is generated using the fullname template.
    name: ""

  # Pod-level configuration.
  pod:
    metadata:
      labels: {}
      annotations: {}

    # PodSpec fields applied to spec.template.spec.
    # Note: containers provided here are appended after the built-in manager container.
    spec:
      # Pod-level security context.
      securityContext: {}
      # Pod priority class name.
      priorityClassName: ""
      # Node selection constraints.
      nodeSelector: {}
      # Pod tolerations.
      tolerations: []
      # Pod affinity.
      affinity: {}
      # Pod topology spread constraints.
      topologySpreadConstraints: []
      # Pod termination grace period. Overrides the default of 35s, which must
      # stay above the manager's graceful shutdown timeout (30s, controller-runtime's
      # default) so in-flight reconciles can finish before the kubelet sends SIGKILL.
      terminationGracePeriodSeconds: null
      # Additional volumes appended to the default ones.
      volumes: []
      # Additional containers appended after the manager container.
      containers: []

    # Additional volume mounts appended to the manager container's default ones.
    volumeMounts: []

  # Metrics configuration. If omitted, metrics are disabled.
  # controllerManagerAddr accepts host:port (e.g. ":8080", "127.0.0.1:8080",
  # "[::]:8080", or "localhost:8080"), with a numeric port from 1 to 65535.
  # Set it to "0" to disable controller metrics independently of listener metrics.
  # metrics:
  #   controllerManagerAddr: ":8080"
  #   listenerAddr: ":8080"
  #   listenerEndpoint: "/metrics"