From 44faf74b6150f427953fe652a85f0b353acea777 Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Mon, 4 May 2026 11:07:43 -0500 Subject: [PATCH] fix CI runner secrets: correct Gitea URL and use Vault-backed tokens MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The ExternalSecret had a stale Gitea URL (192.168.8.148:30322 — old local IP) and runner tokens were never populated in Vault. Update the template URL to the cluster-internal Gitea service DNS, and store the registration tokens in Vault at secret/gitea.runner_token. --- servers/legion/k8s/gitea-runner/external-secrets.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/servers/legion/k8s/gitea-runner/external-secrets.yaml b/servers/legion/k8s/gitea-runner/external-secrets.yaml index 47c112e..e5ac5d1 100644 --- a/servers/legion/k8s/gitea-runner/external-secrets.yaml +++ b/servers/legion/k8s/gitea-runner/external-secrets.yaml @@ -17,7 +17,7 @@ spec: creationPolicy: Owner template: data: - GITEA_INSTANCE_URL: "http://192.168.8.148:30322" + GITEA_INSTANCE_URL: "http://gitea.git.svc.cluster.local:3000" GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}" data: - secretKey: runner_token @@ -41,7 +41,7 @@ spec: creationPolicy: Owner template: data: - GITEA_INSTANCE_URL: "http://192.168.8.148:30322" + GITEA_INSTANCE_URL: "http://gitea.git.svc.cluster.local:3000" GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}" data: - secretKey: runner_token