panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

在 homelab 启用原生 Pod Worker #106

Merged
panxiao81 merged 1 commits from fix/enable-native-pod-worker into main 2026-09-20 17:16:28 +00:00
Conversation 0 Commits 1 Files Changed 3
+7 -2
3 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
platform/dynamic-runner/README.md
+4
View File
@@ -9,6 +9,10 @@ Gitea -> controller -> NATS -> pod worker -> homelab Kubernetes Pod
`-> VM worker -> OpenSandbox -> Kata/microVM `-> VM worker -> OpenSandbox -> Kata/microVM
``` ```
`dynamic-runner-pod-worker` 使用 durable `pod`，最多并发创建 4 个一次性 privileged
Pod。任务 Pod、ServiceAccount、SPIFFE CSI socket 和生命周期都位于 homelab 的
`dynamic-runner` namespace，不依赖 sandbox 集群或 OpenSandbox API。
`10.60.0.13:8080` 是 VyOS 上的内网 HAProxy frontend，后端是 sandbox 节点的 `10.60.0.13:8080` 是 VyOS 上的内网 HAProxy frontend，后端是 sandbox 节点的
`30080` NodePort。它只依赖现有跨网段路由，不暴露公网，也不经过 Cloudflare `30080` NodePort。它只依赖现有跨网段路由，不暴露公网，也不经过 Cloudflare
Tunnel。controller 自身的 `192.168.10.127:8787` 仅供 Gitea webhook 和 sandbox Tunnel。controller 自身的 `192.168.10.127:8787` 仅供 Gitea webhook 和 sandbox
platform/dynamic-runner/kustomization.yaml
+1
View File
@@ -6,4 +6,5 @@ resources:
- rbac.yaml - rbac.yaml
- clusterspiffeid.yaml - clusterspiffeid.yaml
- deployment.yaml - deployment.yaml
- pod-worker-deployment.yaml
- service.yaml - service.yaml
platform/dynamic-runner/pod-worker-deployment.yaml
+2 -2
View File
@@ -39,8 +39,8 @@ spec:
mountPath: /trust mountPath: /trust
containers: containers:
- name: pod-worker - name: pod-worker
image: gitea-dynamic-runner-controller:0.3.0-bootstrap image: zot.ad.ddupan.top/panxiao81/gitea-dynamic-runner-controller@sha256:9f23e84934643bbe859dc0f8da418421dc8ab7b0958fdf1fdc91d562c30e246f
imagePullPolicy: Never imagePullPolicy: IfNotPresent
command: [/venv/bin/gitea-dynamic-runner-pod-worker] command: [/venv/bin/gitea-dynamic-runner-pod-worker]
env: env:
- name: NATS_URL - name: NATS_URL