gitlab-runner

GitLab Runner

Chainguard's redistribution of the GitLab Runner Helm chart, pre-configured with hardened Chainguard Images.

GitLab Runner is the open source project that runs your CI/CD jobs and sends the results back to GitLab. This chart deploys the runner into a Kubernetes cluster where it registers with a GitLab instance and executes jobs using the Kubernetes executor.

Prerequisites

Authentication is required to access this chart and its images. First, authenticate with Chainguard and configure your environment:

chainctl auth login
chainctl auth configure-docker --pull-token --save
helm registry login cgr.dev

Create an image pull secret in the namespace where the runner will be installed:

kubectl create namespace gitlab-runner
kubectl create secret docker-registry cgr-pull-secret \
  --docker-server=cgr.dev \
  --docker-username="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Username')" \
  --docker-password="$(echo cgr.dev | docker-credential-cgr get | jq -r '.Secret')" \
  --namespace gitlab-runner

Installation

You need a runner registration token from your GitLab instance. See the upstream registration documentation for how to obtain one.

helm install gitlab-runner oci://cgr.dev/ORGANIZATION/charts/gitlab-runner \
  --namespace gitlab-runner \
  --create-namespace \
  --set gitlabUrl=https://gitlab.example.com/ \
  --set runnerToken=<your-runner-token> \
  --set imagePullSecrets[0].name=cgr-pull-secret

About This Chart

This is a redistribution of the upstream GitLab Runner Helm chart. All upstream configuration options and documentation apply.

For full documentation, see: https://docs.gitlab.com/runner/install/kubernetes.html