From 01507ad8ae4c8513ddaa7e3c5b0ab3b0d2e94fa5 Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Tue, 5 May 2026 03:39:17 -0500 Subject: [PATCH] fix(runner): point GITEA_INSTANCE_URL at GKE Gitea public URL MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Gitea moved to GKE. The old in-cluster URL http://gitea.git.svc.cluster.local:3000 now has 0 pods behind it. The runner daemon gets connection refused on every poll. Switch both ExternalSecrets to https://git.neuralplatform.ai. The public URL does not require CF Access tokens — the runner can connect without them. CF_ACCESS_CLIENT_ID/SECRET remain for git operations inside CI job containers (via BASH_ENV init script). --- servers/legion/k8s/gitea-runner/external-secrets.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/servers/legion/k8s/gitea-runner/external-secrets.yaml b/servers/legion/k8s/gitea-runner/external-secrets.yaml index a41daa6..14fe47d 100644 --- a/servers/legion/k8s/gitea-runner/external-secrets.yaml +++ b/servers/legion/k8s/gitea-runner/external-secrets.yaml @@ -14,7 +14,7 @@ metadata: name: gitea-runner-secret namespace: ci annotations: - force-sync: "2026-05-04-cf-access" + force-sync: "2026-05-05-gke-gitea-url" spec: refreshInterval: 1h secretStoreRef: @@ -25,7 +25,7 @@ spec: creationPolicy: Owner template: data: - GITEA_INSTANCE_URL: "http://gitea.git.svc.cluster.local:3000" + GITEA_INSTANCE_URL: "https://git.neuralplatform.ai" GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}" CF_ACCESS_CLIENT_ID: "{{ .cf_access_client_id }}" CF_ACCESS_CLIENT_SECRET: "{{ .cf_access_client_secret }}" @@ -50,7 +50,7 @@ metadata: name: neuron-technologies-runner-secret namespace: ci annotations: - force-sync: "2026-05-04-cf-access" + force-sync: "2026-05-05-gke-gitea-url" spec: refreshInterval: 1h secretStoreRef: @@ -61,7 +61,7 @@ spec: creationPolicy: Owner template: data: - GITEA_INSTANCE_URL: "http://gitea.git.svc.cluster.local:3000" + GITEA_INSTANCE_URL: "https://git.neuralplatform.ai" GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}" CF_ACCESS_CLIENT_ID: "{{ .cf_access_client_id }}" CF_ACCESS_CLIENT_SECRET: "{{ .cf_access_client_secret }}"