归档：Kata / microVM runner 实验（2026-09-17 工作区快照）

从旧工作区 chore/recover-old-workspace 清理时保存，内容与 2026-09-17 stash@{0} 快照中的版本一致；未合并、未在 main 上使用，仅作参考，不开 PR。被 gitignore 的 tfstate 与凭据文件不在此分支，仍留在本地工作区。 Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-01 17:30:48 +00:00
parent 69d3476a6b
commit 55bb5be8b6
39 changed files with 1891 additions and 0 deletions
@@ -0,0 +1,35 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: gitea-actions
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: kata-ephemeral-runner-config
+  namespace: gitea-actions
+data:
+  config.yaml: |
+    log:
+      level: info
+    runner:
+      file: /runner-state/.runner
+      capacity: 1
+      envs:
+        DOCKER_HOST: tcp://host.docker.internal:2375
+      timeout: 3h
+      shutdown_timeout: 5m
+      labels:
+        - kata-poc:docker://docker.io/library/alpine:3.22
+    cache:
+      enabled: false
+    container:
+      network: ""
+      options: --add-host=host.docker.internal:host-gateway
+      docker_host: tcp://127.0.0.1:2375
+      require_docker: true
+      docker_timeout: 5m
+      force_pull: true
+      bind_workdir: false