panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

停止 OpenSandbox 消费 Pod 任务 #105

Merged
panxiao81 merged 1 commits from fix/separate-pod-opensandbox into main 2026-09-20 17:13:44 +00:00
Conversation 0 Commits 1 Files Changed 2
+9 -7
2 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 89bd7864e6 - Show all commits
platform/dynamic-runner/README.md
+5 -5
View File
@@ -1,12 +1,12 @@
# Gitea dynamic runner controller # Gitea dynamic runner controller
controller 接收 Gitea `workflow_job` webhook，对带 `[self-hosted, pod]` 或 controller 接收 Gitea `workflow_job` webhook，并将带 `[self-hosted, pod]` 或
`[self-hosted, vm]` 的 queued job 直接调用 OpenSandbox Lifecycle API。链路不使用 `[self-hosted, vm]` 的 queued job 持久化到 NATS JetStream。Pod workload 在 homelab
NATS、消息队列或平台侧 webhook worker。 集群由原生 Kubernetes worker 创建；只有 VM workload 通过 OpenSandbox Lifecycle API。
```text ```text
Gitea -> dynamic-runner-controller -> http://10.60.0.13:8080/v1/sandboxes Gitea -> controller -> NATS -> pod worker -> homelab Kubernetes Pod
-> ci-pod / ci-vm Pool `-> VM worker -> OpenSandbox -> Kata/microVM
``` ```
`10.60.0.13:8080` 是 VyOS 上的内网 HAProxy frontend，后端是 sandbox 节点的 `10.60.0.13:8080` 是 VyOS 上的内网 HAProxy frontend，后端是 sandbox 节点的
platform/dynamic-runner/deployment.yaml
+4 -2
View File
@@ -40,7 +40,7 @@ spec:
mountPath: /trust mountPath: /trust
containers: containers:
- name: controller - name: controller
image: zot.ad.ddupan.top/panxiao81/gitea-dynamic-runner-controller@sha256:b65a39a8adcdb2b886f0fb956fc6e6bae822bfbc1ff8c48213948e4c0a7d551a image: zot.ad.ddupan.top/panxiao81/gitea-dynamic-runner-controller@sha256:9f23e84934643bbe859dc0f8da418421dc8ab7b0958fdf1fdc91d562c30e246f
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
env: env:
- name: NATS_URL - name: NATS_URL
@@ -52,7 +52,9 @@ spec:
- name: NATS_WORKER_PASSWORD_FILE - name: NATS_WORKER_PASSWORD_FILE
value: /run/dynamic-runner-secrets/nats-worker-password value: /run/dynamic-runner-secrets/nats-worker-password
- name: POD_CONSUMER_ENABLED - name: POD_CONSUMER_ENABLED
value: "true" value: "false"
- name: VM_CONSUMER_ENABLED
value: "false"
- name: WEBHOOK_SECRET_FILE - name: WEBHOOK_SECRET_FILE
value: /run/dynamic-runner-secrets/webhook-secret value: /run/dynamic-runner-secrets/webhook-secret
- name: REGISTRATION_TOKEN_FILE - name: REGISTRATION_TOKEN_FILE