apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: gitlab-runner
  namespace: gitlab-managed-apps
spec:
  interval: 10m
  timeout: 10m
  chart:
    spec:
      chart: gitlab-runner-infra
      version: "17.5.3"
      sourceRef:
        kind: HelmRepository
        name: yc-oci-charts
        namespace: flux-system
      interval: 10m
  install:
    remediation:
      retries: 3
  upgrade:
    remediation:
      retries: 3
  values:
    gitlabUrl: https://gitlab.sarex.io
    concurrent: 20
    checkInterval: 10
    unregisterRunners: true
    terminationGracePeriodSeconds: 3600
    image:
      registry: cr.yandex/crp3ccidau046kdj8g9q
      image: mirror/gitlab-runner
    imagePullSecrets:
      - name: istio-registry-secret
    nodeSelector:
      sarex.io/pool: svc
    rbac:
      create: true
      clusterWideAccess: false
    serviceAccount:
      create: true
    podSecurityContext:
      fsGroup: 65533
      runAsUser: 100
    metrics:
      enabled: false
    runners:
      secret: gitlab-runner-secret
      executor: kubernetes
      cache: {}
      config: |
        [[runners]]
          [runners.kubernetes]
            namespace = "{{.Release.Namespace}}"
            image = "cr.yandex/crp3ccidau046kdj8g9q/mirror/docker:24.0.5"
            helper_image = "cr.yandex/crp3ccidau046kdj8g9q/mirror/gitlab-runner-helper:x86_64-v17.5.3"
            image_pull_secrets = ["istio-registry-secret"]
            poll_interval = 10
            poll_timeout = 600
            privileged = true
            tls_verify = false
            cpu_request = "0.1"
            cpu_limit = "3"
            memory_request = "128Mi"
            memory_limit = "3Gi"
            helper_cpu_request = "0.05"
            helper_cpu_limit = "3"
            helper_memory_request = "32Mi"
            helper_memory_limit = "10Gi"
            service_cpu_request = "0.5"
            service_cpu_limit = "3"
            service_memory_request = "3Gi"

            [runners.feature_flags]
              FF_USE_LEGACY_KUBERNETES_EXECUTION_STRATEGY = false
            [runners.kubernetes.node_selector]
              "sarex.io/pool" = "runners"
            [runners.kubernetes.node_tolerations]
              "sarex.io/pool=runners" = "NoSchedule"