From 79d89bac13fd3592aa58b876d9ef39657e7c9504 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Thu, 15 Oct 2026 13:05:06 +0300
Subject: [PATCH] ++ runner prod

---
 .../vk-prod/infrastructure/kustomization.yaml |  1 +
 .../gitlab-runner/vk-prod/gitlab-runner.yaml  | 77 +++++++++++++++++++
 .../gitlab-runner/vk-prod/kustomization.yaml  |  5 ++
 .../gitlab-runner/vk-prod/namespace.yaml      |  4 +
 4 files changed, 87 insertions(+)
 create mode 100644 infrastructure/gitlab-runner/vk-prod/gitlab-runner.yaml
 create mode 100644 infrastructure/gitlab-runner/vk-prod/kustomization.yaml
 create mode 100644 infrastructure/gitlab-runner/vk-prod/namespace.yaml

diff --git a/clusters/vk-prod/infrastructure/kustomization.yaml b/clusters/vk-prod/infrastructure/kustomization.yaml
index a843017..6cb63b5 100644
--- a/clusters/vk-prod/infrastructure/kustomization.yaml
+++ b/clusters/vk-prod/infrastructure/kustomization.yaml
@@ -4,3 +4,4 @@ resources:
   - ../../../infrastructure/istio-base/vk-prod
   - ../../../infrastructure/istio-pilot/vk-prod
   - ../../../infrastructure/istio-gateway/vk-prod
+  - ../../../infrastructure/gitlab-runner/vk-prod
diff --git a/infrastructure/gitlab-runner/vk-prod/gitlab-runner.yaml b/infrastructure/gitlab-runner/vk-prod/gitlab-runner.yaml
new file mode 100644
index 0000000..bcc5a9d
--- /dev/null
+++ b/infrastructure/gitlab-runner/vk-prod/gitlab-runner.yaml
@@ -0,0 +1,77 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: gitlab-runner
+  namespace: gitlab-managed-apps
+spec:
+  interval: 10m
+  timeout: 10m
+  chart:
+    spec:
+      chart: gitlab-runner-infra
+      version: "17.5.3"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    gitlabUrl: https://gitlab.sarex.io
+    concurrent: 20
+    checkInterval: 10
+    unregisterRunners: true
+    terminationGracePeriodSeconds: 3600
+    image:
+      registry: cr.yandex/crp3ccidau046kdj8g9q
+      image: mirror/gitlab-runner
+    imagePullSecrets:
+      - name: istio-registry-secret
+    rbac:
+      create: true
+      clusterWideAccess: false
+    serviceAccount:
+      create: true
+    podSecurityContext:
+      fsGroup: 65533
+      runAsUser: 100
+    metrics:
+      enabled: false
+    runners:
+      secret: gitlab-runner-secret
+      executor: kubernetes
+      cache: {}
+      config: |
+        [[runners]]
+          [runners.kubernetes]
+            namespace = "{{.Release.Namespace}}"
+            image = "cr.yandex/crp3ccidau046kdj8g9q/mirror/docker:24.0.5"
+            helper_image = "cr.yandex/crp3ccidau046kdj8g9q/mirror/gitlab-runner-helper:x86_64-v17.5.3"
+            image_pull_secrets = ["istio-registry-secret"]
+            poll_interval = 10
+            poll_timeout = 600
+            privileged = true
+            tls_verify = false
+            cpu_request = "0.1"
+            cpu_limit = "3"
+            memory_request = "128Mi"
+            memory_limit = "3Gi"
+            helper_cpu_request = "0.05"
+            helper_cpu_limit = "3"
+            helper_memory_request = "32Mi"
+            helper_memory_limit = "10Gi"
+            service_cpu_request = "0.5"
+            service_cpu_limit = "3"
+            service_memory_request = "3Gi"
+
+            [runners.feature_flags]
+              FF_USE_LEGACY_KUBERNETES_EXECUTION_STRATEGY = false
+            [runners.kubernetes.node_selector]
+              "sarex.io/pool" = "runners"
+            [runners.kubernetes.node_tolerations]
+              "sarex.io/pool=runners" = "NoSchedule"
diff --git a/infrastructure/gitlab-runner/vk-prod/kustomization.yaml b/infrastructure/gitlab-runner/vk-prod/kustomization.yaml
new file mode 100644
index 0000000..fa82e31
--- /dev/null
+++ b/infrastructure/gitlab-runner/vk-prod/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - gitlab-runner.yaml
diff --git a/infrastructure/gitlab-runner/vk-prod/namespace.yaml b/infrastructure/gitlab-runner/vk-prod/namespace.yaml
new file mode 100644
index 0000000..89abf76
--- /dev/null
+++ b/infrastructure/gitlab-runner/vk-prod/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: gitlab-managed-apps