diff --git a/deploy/drone/drone-rbac.yaml b/deploy/drone/drone-rbac.yaml new file mode 100644 index 0000000..7b9f0ad --- /dev/null +++ b/deploy/drone/drone-rbac.yaml @@ -0,0 +1,40 @@ +kind: Role +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + namespace: default + name: drone +rules: +- apiGroups: + - "" + resources: + - secrets + verbs: + - create + - delete +- apiGroups: + - "" + resources: + - pods + - pods/log + verbs: + - get + - create + - delete + - list + - watch + - update + +--- +kind: RoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: drone + namespace: default +subjects: +- kind: ServiceAccount + name: default + namespace: default +roleRef: + kind: Role + name: drone + apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/deploy/drone/drone-runner-arm64.yaml b/deploy/drone/drone-runner-arm64.yaml deleted file mode 100644 index 90810b4..0000000 --- a/deploy/drone/drone-runner-arm64.yaml +++ /dev/null @@ -1,37 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: drone-runner-arm64 - namespace: drone -spec: - replicas: 2 # adjust replica count as needed - selector: - matchLabels: - app: drone-runner-arm64 - template: - metadata: - labels: - app: drone-runner-arm64 - spec: - # Ensure pods are scheduled only on ARM64 nodes - nodeSelector: - kubernetes.io/arch: "arm64" - containers: - - name: drone-runner-arm64 - image: drone/drone-runner-kube:latest - imagePullPolicy: Always - env: - - name: DRONE_RPC_HOST - value: "drone.beatrice.wtf" - - name: DRONE_RPC_PROTO - value: "https" - - name: DRONE_RPC_SECRET - value: "26a2221fd8090ea38720fc445eca6a45a39a63fcce3ba30712e7153b855f8" - - name: DRONE_RUNNER_CAPACITY - value: "3" - - name: DRONE_RUNNER_PLATFORM_OS - value: "linux" - - name: DRONE_RUNNER_PLATFORM_ARCH - value: "arm64" - - name: DRONE_DEBUG - value: "true" \ No newline at end of file diff --git a/deploy/drone/drone-runner-amd64.yaml b/deploy/drone/drone-runner.yaml similarity index 64% rename from deploy/drone/drone-runner-amd64.yaml rename to deploy/drone/drone-runner.yaml index a57d0b5..7d7ba68 100644 --- a/deploy/drone/drone-runner-amd64.yaml +++ b/deploy/drone/drone-runner.yaml @@ -1,22 +1,19 @@ apiVersion: apps/v1 kind: Deployment metadata: - name: drone-runner-amd64 + name: drone-runner namespace: drone spec: - replicas: 2 + replicas: 5 selector: matchLabels: - app: drone-runner-amd64 + app: drone-runner template: metadata: labels: - app: drone-runner-amd64 - spec: - nodeSelector: - kubernetes.io/arch: "amd64" + app: drone-runner containers: - - name: drone-runner-amd64 + - name: drone-runner image: drone/drone-runner-kube:latest imagePullPolicy: Always env: @@ -28,9 +25,5 @@ spec: value: "26a2221fd8090ea38720fc445eca6a45a39a63fcce3ba30712e7153b855f8" - name: DRONE_RUNNER_CAPACITY value: "3" - - name: DRONE_RUNNER_PLATFORM_OS - value: "linux" - - name: DRONE_RUNNER_PLATFORM_ARCH - value: "amd64" - name: DRONE_DEBUG value: "true" \ No newline at end of file diff --git a/deploy/drone/kustomization.yaml b/deploy/drone/kustomization.yaml index 3c946ee..5c85362 100644 --- a/deploy/drone/kustomization.yaml +++ b/deploy/drone/kustomization.yaml @@ -1,6 +1,6 @@ resources: + - drone-rbac.yaml - drone-server.yaml - - drone-runner-amd64.yaml - - drone-runner-arm64.yaml + - drone-runner.yaml - drone-ingress.yaml - drone-pvc.yaml