Infrastructure as Code: - Add Kaniko namespace and RBAC manifests - Create ArgoCD Application for Kaniko infrastructure - Kustomize configuration for Kaniko resources Workflow improvements: - Remove kubeconfig dependency - Use in-cluster ServiceAccount (runner runs in K8s) - Remove all sudo commands - Simplify Kubernetes access GitOps workflow: 1. Push manifests to Git 2. ArgoCD auto-syncs infrastructure 3. Gitea runner uses ServiceAccount permissions 4. Kaniko builds run in kaniko-builds namespace Benefits: - True GitOps approach - No secrets management needed - Declarative infrastructure - ArgoCD handles reconciliation - Audit trail in Git
8 lines
169 B
YAML
8 lines
169 B
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: kaniko-builds
|
|
labels:
|
|
app.kubernetes.io/name: kaniko-builds
|
|
app.kubernetes.io/component: build-infrastructure
|