From b4b05bfe40797654dc94d917b36b50142a6ad8e7 Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Mon, 4 May 2026 17:55:28 -0500
Subject: [PATCH] fix(ci): remove duplicate runner Deployment from apps/
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The stale apps/gitea-runner.yaml contained two Deployment manifests
that conflicted with the canonical Deployments owned by the
gitea-runner-config Argo Application (pointing at k8s/gitea-runner/).

Dual ownership caused Argo CD to fight itself — restarting runner
pods mid-job and producing the "context canceled" failures on
neuron-technologies/dharma-el CI.

Canonical Deployments (config-version 2026-05-04-cf-access-public-url,
docker.sock, CF Access env, replicas=2 for nt-runner) live in
k8s/gitea-runner/deployment.yaml and are managed by gitea-runner-config.
---
 servers/legion/apps/gitea-runner.yaml | 165 --------------------------
 1 file changed, 165 deletions(-)
 delete mode 100644 servers/legion/apps/gitea-runner.yaml

diff --git a/servers/legion/apps/gitea-runner.yaml b/servers/legion/apps/gitea-runner.yaml
deleted file mode 100644
index 0789831..0000000
--- a/servers/legion/apps/gitea-runner.yaml
+++ /dev/null
@@ -1,165 +0,0 @@
----
-# Gitea CI runner — general-purpose (legion)
-# Uses host Docker socket for container management and docker build/push.
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: gitea-runner
-  namespace: ci
-  labels:
-    app: gitea-runner
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: gitea-runner
-  template:
-    metadata:
-      labels:
-        app: gitea-runner
-      annotations:
-        config-version: "2026-04-27-containerd-sock"
-    spec:
-      securityContext:
-        runAsNonRoot: false  # act_runner needs root for container management
-      initContainers:
-        - name: register
-          image: registry.neuralplatform.ai/ci-base:latest
-          workingDir: /data
-          command: ["/bin/sh", "-c"]
-          args:
-            - |
-              act_runner register \
-                --instance "$GITEA_INSTANCE_URL" \
-                --token "$GITEA_RUNNER_REGISTRATION_TOKEN" \
-                --name legion \
-                --labels "self-hosted:docker://registry.neuralplatform.ai/ci-base:latest,ubuntu-latest:docker://registry.neuralplatform.ai/ci-base:latest,ubuntu-24.04:docker://registry.neuralplatform.ai/ci-base:latest,linux,x64" \
-                --no-interactive
-              cat > /data/config.yaml << 'EOF'
-              runner:
-                capacity: 2
-                timeout: 3h
-              container:
-                network: host
-                docker_host: "unix:///run/k3s/containerd/containerd.sock"
-                force_pull: false
-                valid_volumes: []
-                default_image: "registry.neuralplatform.ai/ci-base:latest"
-                extra_hosts:
-                  - "gitea.git.svc.cluster.local:10.43.1.53"
-              EOF
-          envFrom:
-            - secretRef:
-                name: gitea-runner-secret
-          volumeMounts:
-            - name: data
-              mountPath: /data
-      containers:
-        - name: runner
-          image: registry.neuralplatform.ai/ci-base:latest
-          workingDir: /data
-          command: ["act_runner", "daemon", "--config", "/data/config.yaml"]
-          envFrom:
-            - secretRef:
-                name: gitea-runner-secret
-          volumeMounts:
-            - name: data
-              mountPath: /data
-            - name: docker-sock
-              mountPath: /var/run/docker.sock
-          resources:
-            requests:
-              memory: 512Mi
-              cpu: 250m
-            limits:
-              memory: 4Gi
-              cpu: "4"
-      volumes:
-        - name: data
-          emptyDir: {}
-        - name: docker-sock
-          hostPath:
-            path: /run/k3s/containerd/containerd.sock
-            type: Socket
----
-# Neuron Technologies CI runner
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: neuron-technologies-runner
-  namespace: ci
-  labels:
-    app: neuron-technologies-runner
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: neuron-technologies-runner
-  template:
-    metadata:
-      labels:
-        app: neuron-technologies-runner
-      annotations:
-        config-version: "2026-04-27-containerd-sock"
-    spec:
-      securityContext:
-        runAsNonRoot: false
-      initContainers:
-        - name: register
-          image: registry.neuralplatform.ai/ci-base:latest
-          workingDir: /data
-          command: ["/bin/sh", "-c"]
-          args:
-            - |
-              act_runner register \
-                --instance "$GITEA_INSTANCE_URL" \
-                --token "$GITEA_RUNNER_REGISTRATION_TOKEN" \
-                --name neuron-technologies \
-                --labels "self-hosted:docker://registry.neuralplatform.ai/ci-base:latest,ubuntu-latest:docker://registry.neuralplatform.ai/ci-base:latest,ubuntu-24.04:docker://registry.neuralplatform.ai/ci-base:latest,linux,x64" \
-                --no-interactive
-              cat > /data/config.yaml << 'EOF'
-              runner:
-                capacity: 2
-                timeout: 3h
-              container:
-                network: host
-                docker_host: "unix:///run/k3s/containerd/containerd.sock"
-                force_pull: false
-                valid_volumes: []
-                default_image: "registry.neuralplatform.ai/ci-base:latest"
-                extra_hosts:
-                  - "gitea.git.svc.cluster.local:10.43.1.53"
-              EOF
-          envFrom:
-            - secretRef:
-                name: neuron-technologies-runner-secret
-          volumeMounts:
-            - name: data
-              mountPath: /data
-      containers:
-        - name: runner
-          image: registry.neuralplatform.ai/ci-base:latest
-          workingDir: /data
-          command: ["act_runner", "daemon", "--config", "/data/config.yaml"]
-          envFrom:
-            - secretRef:
-                name: neuron-technologies-runner-secret
-          volumeMounts:
-            - name: data
-              mountPath: /data
-            - name: docker-sock
-              mountPath: /var/run/docker.sock
-          resources:
-            requests:
-              memory: 512Mi
-              cpu: 250m
-            limits:
-              memory: 4Gi
-              cpu: "4"
-      volumes:
-        - name: data
-          emptyDir: {}
-        - name: docker-sock
-          hostPath:
-            path: /run/k3s/containerd/containerd.sock
-            type: Socket