From 010d81d6d909a8925c88f5e630ed15fdecc9af7d Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Mon, 4 May 2026 23:32:09 -0500
Subject: [PATCH] fix(runner): correct Gitea ClusterIP and enable force_pull

extra_hosts had stale IP 10.43.1.53 (Gitea is now at 10.43.15.98).
force_pull: true ensures runners always use the latest ci-base image.
Applies to both gitea-runner and neuron-technologies-runner.
---
 servers/legion/k8s/gitea-runner/deployment.yaml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/servers/legion/k8s/gitea-runner/deployment.yaml b/servers/legion/k8s/gitea-runner/deployment.yaml
index 7cacc58..1ce5510 100644
--- a/servers/legion/k8s/gitea-runner/deployment.yaml
+++ b/servers/legion/k8s/gitea-runner/deployment.yaml
@@ -8,7 +8,7 @@ metadata:
   labels:
     app: gitea-runner
   annotations:
-    config-version: "2026-05-04-cf-access-public-url"
+    config-version: "2026-05-05-force-pull-ip-fix"
 spec:
   replicas: 1
   selector:
@@ -19,7 +19,7 @@ spec:
       labels:
         app: gitea-runner
       annotations:
-        config-version: "2026-05-04-cf-access-public-url"
+        config-version: "2026-05-05-force-pull-ip-fix"
     spec:
       securityContext:
         runAsNonRoot: false
@@ -42,7 +42,7 @@ spec:
               container:
                 network: host
                 docker_host: "unix:///var/run/docker.sock"
-                force_pull: false
+                force_pull: true
                 valid_volumes: []
                 default_image: "registry.neuralplatform.ai/ci-base:latest"
                 # Build containers run with network: host. The in-cluster
@@ -56,7 +56,7 @@ spec:
                   CF_ACCESS_CLIENT_SECRET: "${CF_ACCESS_CLIENT_SECRET}"
                   BASH_ENV: "/usr/local/bin/git-cf-access-init.sh"
                 extra_hosts:
-                  - "gitea.git.svc.cluster.local:10.43.1.53"
+                  - "gitea.git.svc.cluster.local:10.43.15.98"
               EOF
           envFrom:
             - secretRef:
@@ -102,7 +102,7 @@ metadata:
   labels:
     app: neuron-technologies-runner
   annotations:
-    config-version: "2026-05-04-cf-access-public-url"
+    config-version: "2026-05-05-force-pull-ip-fix"
 spec:
   replicas: 2
   selector:
@@ -113,7 +113,7 @@ spec:
       labels:
         app: neuron-technologies-runner
       annotations:
-        config-version: "2026-05-04-cf-access-public-url"
+        config-version: "2026-05-05-force-pull-ip-fix"
     spec:
       securityContext:
         runAsNonRoot: false
@@ -136,7 +136,7 @@ spec:
               container:
                 network: host
                 docker_host: "unix:///var/run/docker.sock"
-                force_pull: false
+                force_pull: true
                 valid_volumes: []
                 default_image: "registry.neuralplatform.ai/ci-base:latest"
                 # Build containers run with network: host. The in-cluster
@@ -150,7 +150,7 @@ spec:
                   CF_ACCESS_CLIENT_SECRET: "${CF_ACCESS_CLIENT_SECRET}"
                   BASH_ENV: "/usr/local/bin/git-cf-access-init.sh"
                 extra_hosts:
-                  - "gitea.git.svc.cluster.local:10.43.1.53"
+                  - "gitea.git.svc.cluster.local:10.43.15.98"
               EOF
           envFrom:
             - secretRef: