++ runner prod

clusters/vk-prod/infrastructure/kustomization.yaml

@@ -4,3 +4,4 @@ resources:
   - ../../../infrastructure/istio-base/vk-prod
   - ../../../infrastructure/istio-pilot/vk-prod
   - ../../../infrastructure/istio-gateway/vk-prod
+  - ../../../infrastructure/gitlab-runner/vk-prod

infrastructure/gitlab-runner/vk-prod/gitlab-runner.yaml

@@ -0,0 +1,77 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: gitlab-runner
+  namespace: gitlab-managed-apps
+spec:
+  interval: 10m
+  timeout: 10m
+  chart:
+    spec:
+      chart: gitlab-runner-infra
+      version: "17.5.3"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    gitlabUrl: https://gitlab.sarex.io
+    concurrent: 20
+    checkInterval: 10
+    unregisterRunners: true
+    terminationGracePeriodSeconds: 3600
+    image:
+      registry: cr.yandex/crp3ccidau046kdj8g9q
+      image: mirror/gitlab-runner
+    imagePullSecrets:
+      - name: istio-registry-secret
+    rbac:
+      create: true
+      clusterWideAccess: false
+    serviceAccount:
+      create: true
+    podSecurityContext:
+      fsGroup: 65533
+      runAsUser: 100
+    metrics:
+      enabled: false
+    runners:
+      secret: gitlab-runner-secret
+      executor: kubernetes
+      cache: {}
+      config: |
+        [[runners]]
+          [runners.kubernetes]
+            namespace = "{{.Release.Namespace}}"
+            image = "cr.yandex/crp3ccidau046kdj8g9q/mirror/docker:24.0.5"
+            helper_image = "cr.yandex/crp3ccidau046kdj8g9q/mirror/gitlab-runner-helper:x86_64-v17.5.3"
+            image_pull_secrets = ["istio-registry-secret"]
+            poll_interval = 10
+            poll_timeout = 600
+            privileged = true
+            tls_verify = false
+            cpu_request = "0.1"
+            cpu_limit = "3"
+            memory_request = "128Mi"
+            memory_limit = "3Gi"
+            helper_cpu_request = "0.05"
+            helper_cpu_limit = "3"
+            helper_memory_request = "32Mi"
+            helper_memory_limit = "10Gi"
+            service_cpu_request = "0.5"
+            service_cpu_limit = "3"
+            service_memory_request = "3Gi"
+
+            [runners.feature_flags]
+              FF_USE_LEGACY_KUBERNETES_EXECUTION_STRATEGY = false
+            [runners.kubernetes.node_selector]
+              "sarex.io/pool" = "runners"
+            [runners.kubernetes.node_tolerations]
+              "sarex.io/pool=runners" = "NoSchedule"

infrastructure/gitlab-runner/vk-prod/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - gitlab-runner.yaml

infrastructure/gitlab-runner/vk-prod/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: gitlab-managed-apps