Erich Blume
16e6a336cc
Replace the Docker buildx + skopeo composite action with a Dagger Python module for building and publishing container images. BuildKit's native push is compatible with Zot, eliminating the skopeo workaround entirely. - Add Dagger Python module (.dagger/) with build/publish functions - Update build-container.yaml workflow to use `dagger call publish` - Add Dagger CLI to forgejo-runner image (v0.19.11) - Bump runner version to v2.6.0 in ExternalSecret - Add GPLv3 LICENSE - Add dagger to mise.toml Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
34 lines
994 B
YAML
34 lines
994 B
YAML
# ExternalSecret for Forgejo Runner environment
|
|
#
|
|
# Replaces the manual op inject workflow from secret.yaml.tpl
|
|
#
|
|
# 1Password item: "Forgejo Secrets" in blumeops vault
|
|
# Field: runner_reg (runner registration token)
|
|
#
|
|
# Note: Static values (FORGEJO_URL, RUNNER_NAME, RUNNER_LABELS) are included
|
|
# via template since they don't need to be in 1Password.
|
|
#
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: forgejo-runner-env
|
|
namespace: forgejo-runner
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: onepassword-blumeops
|
|
target:
|
|
name: forgejo-runner-env
|
|
creationPolicy: Owner
|
|
template:
|
|
data:
|
|
FORGEJO_URL: "https://forge.ops.eblu.me"
|
|
RUNNER_NAME: "k8s-runner"
|
|
RUNNER_LABELS: "k8s:docker://registry.ops.eblu.me/blumeops/forgejo-runner:v2.6.0"
|
|
RUNNER_TOKEN: "{{ .runner_token }}"
|
|
data:
|
|
- secretKey: runner_token
|
|
remoteRef:
|
|
key: Forgejo Secrets
|
|
property: runner_reg
|