Fixed gitea runner scheduling. Bump amnezia

2026-07-30 23:16:36 +01:00
parent e40a4d0c72
commit 80b792ce8c
3 changed files with 311 additions and 34 deletions
@@ -6,6 +6,7 @@ resources:
  - external-secrets.yaml
  - deployment.yaml
  - runner-rbac.yaml
+  - runner-rebalance.yaml
  - user-unban-cronjob.yaml
  - service.yaml
  - ingress.yaml
@@ -0,0 +1,127 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: gitea-runner-rebalancer
+  namespace: gitea
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: gitea-runner-rebalancer
+  namespace: gitea
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - get
+      - list
+      - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: gitea-runner-rebalancer
+  namespace: gitea
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: gitea-runner-rebalancer
+subjects:
+  - kind: ServiceAccount
+    name: gitea-runner-rebalancer
+    namespace: gitea
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: gitea-runner-rebalancer
+rules:
+  - apiGroups:
+      - ""
+    resources:
+      - nodes
+    resourceNames:
+      - ai.tail2fe2d.ts.net
+    verbs:
+      - get
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: gitea-runner-rebalancer
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: gitea-runner-rebalancer
+subjects:
+  - kind: ServiceAccount
+    name: gitea-runner-rebalancer
+    namespace: gitea
+---
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: gitea-runner-rebalancer
+  namespace: gitea
+spec:
+  schedule: "*/2 * * * *"
+  concurrencyPolicy: Forbid
+  successfulJobsHistoryLimit: 1
+  failedJobsHistoryLimit: 3
+  jobTemplate:
+    spec:
+      ttlSecondsAfterFinished: 300
+      template:
+        metadata:
+          labels:
+            app: gitea-runner-rebalancer
+        spec:
+          serviceAccountName: gitea-runner-rebalancer
+          restartPolicy: Never
+          containers:
+            - name: rebalance
+              image: bitnami/kubectl:latest
+              imagePullPolicy: IfNotPresent
+              command:
+                - /bin/sh
+                - -ec
+                - |
+                  target_node="ai.tail2fe2d.ts.net"
+                  ready="$(
+                    kubectl get node "${target_node}" \
+                      -o jsonpath='{range .status.conditions[?(@.type=="Ready")]}{.status}{end}'
+                  )"
+
+                  if [ "${ready}" != "True" ]; then
+                    echo "${target_node} is not Ready; keeping the runner on its current node"
+                    exit 0
+                  fi
+
+                  runner_pod="$(
+                    kubectl -n gitea get pods \
+                      -l app=gitea-runner \
+                      --field-selector=status.phase=Running \
+                      -o jsonpath='{.items[0].metadata.name}'
+                  )"
+                  runner_node="$(
+                    kubectl -n gitea get pods \
+                      -l app=gitea-runner \
+                      --field-selector=status.phase=Running \
+                      -o jsonpath='{.items[0].spec.nodeName}'
+                  )"
+
+                  if [ -z "${runner_pod}" ] || [ -z "${runner_node}" ]; then
+                    echo "No running Gitea runner found"
+                    exit 0
+                  fi
+
+                  if [ "${runner_node}" = "${target_node}" ]; then
+                    echo "${runner_pod} already runs on ${target_node}"
+                    exit 0
+                  fi
+
+                  echo "Moving ${runner_pod} from ${runner_node} to preferred node ${target_node}"
+                  kubectl -n gitea delete pod "${runner_pod}" --wait=false