Add GitOps stack for abrban.com with Gitea Actions CI/CD.

Harbor in-cluster builds via Kaniko, ArgoCD auto-sync, and production Helm values for abrban.com domains. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-02 01:27:20 +03:30
parent ee5bd0a291
commit 5ed2ef0958
39 changed files with 1841 additions and 99 deletions
@@ -0,0 +1,57 @@
+# Gitea Actions runner — host mode + Kaniko (no docker.sock; k3s uses containerd)
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gitea-act-runner-token
+  namespace: gitea
+type: Opaque
+stringData:
+  token: "nL63VkZEyqpCNFdF3AMM9wzQLdLlATUvXSe5Tj0R"
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: gitea-act-runner
+  namespace: gitea
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: gitea-act-runner
+  template:
+    metadata:
+      labels:
+        app: gitea-act-runner
+    spec:
+      imagePullSecrets:
+        - name: registry-pull-secret
+      initContainers:
+        - name: kaniko-bin
+          image: registry.abrban.com/abrban/kaniko-executor:v1.23.2
+          imagePullPolicy: IfNotPresent
+          command: ["sh", "-c", "cp /kaniko/executor /kaniko-bin/executor && chmod +x /kaniko-bin/executor"]
+          volumeMounts:
+            - name: kaniko-bin
+              mountPath: /kaniko-bin
+      containers:
+        - name: runner
+          image: registry.abrban.com/abrban/act-runner:0.2.11
+          imagePullPolicy: IfNotPresent
+          env:
+            - name: GITEA_INSTANCE_URL
+              value: https://git.abrban.com
+            - name: GITEA_RUNNER_REGISTRATION_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: gitea-act-runner-token
+                  key: token
+            - name: GITEA_RUNNER_NAME
+              value: k8s-abr-runner
+            - name: GITEA_RUNNER_LABELS
+              value: abrban-kaniko:host
+          volumeMounts:
+            - name: kaniko-bin
+              mountPath: /kaniko
+      volumes:
+        - name: kaniko-bin
+          emptyDir: {}