gitlab-runner.yml

apiVersion: v1
kind: ServiceAccount
metadata:
  name: gitlab-runner
  namespace: gitlab
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: gitlab-runner-role
  namespace: gitlab
rules:
  - apiGroups: [""]
    resources: ["*"]
    verbs: ["*"]
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: gitlab-runner-rb
  namespace: gitlab
subjects:
  - kind: ServiceAccount
    name: gitlab-runner
    namespace: gitlab
roleRef:
  kind: Role
  name: gitlab-runner-role
  apiGroup: rbac.authorization.k8s.io
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: gitlab-runner-configmap
  namespace: gitlab
data:
  entrypoint: |
    #!/bin/bash
    cp /scripts/config.toml /etc/gitlab-runner/config.toml
    exec /entrypoint run
  config.toml: |
    concurrent = 4
    [[runners]]
      name = "Kubernetes Runner"
      url = "https://gitlab.com/ci"
      token = ""
      executor = "kubernetes"
      [runners.kubernetes]
        namespace = "gitlab"
        poll_timeout = 600
        service_account_overwrite_allowed = "gitlab-(runner|deploy)"
        helper_image = "titilambert/gitlab-runner-helper:x86_64-d97749b6"
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: gitlab-runner-deployment
  namespace: gitlab
  labels:
    app: gitlab-runner
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gitlab-runner
  template:
    metadata:
      labels:
        app: gitlab-runner
    spec:
      serviceAccountName: gitlab-runner
      containers:
      - name: gitlab-runner 
        image: gitlab/gitlab-runner:alpine
        command:
        - '/bin/bash'
        - '/scripts/entrypoint'
        volumeMounts:
        - name: config
          mountPath: /scripts
      volumes:
      - name: config
        configMap:
          name: gitlab-runner-configmap