Update manifest

files/drone-runner/drone-runner-ConfigMap.yaml

@@ -1,17 +1,20 @@
+# Source: drone-runner-kube/templates/configmap.yaml
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: drone-runner
+  name: drone-runner-kube
   namespace: drone
   labels:
-    app.kubernetes.io/name: drone
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
     app.kubernetes.io/instance: drone
-    app.kubernetes.io/component: server
-    app.kubernetes.io/version: "1.6.5"
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 data:
   DRONE_RPC_HOST: "drone.reslinger.net"
   DRONE_RPC_PROTO: "https"
   DRONE_UI_DISABLE: "true"
   DRONE_RUNNER_CAPACITY: "2"
-  DRONE_NAMESPACE_DEFAULT: "drone"
-  DRONE_SERVICE_ACCOUNT_DEFAULT: "drone-runner"
+  DRONE_NAMESPACE_DEFAULT: "drone-runner"
+#  DRONE_SERVICE_ACCOUNT_DEFAULT: "drone-runner"

files/drone-runner/drone-runner-Role.yaml

@@ -1,25 +1,33 @@
+# Source: drone-runner-kube/templates/rbac.yaml
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  namespace: drone
-  name: drone-runner
+  name: drone-runner-kube
+  namespace: "drone-runner"
+  labels:
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 rules:
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - create
-  - delete
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  - pods/log
-  verbs:
-  - get
-  - create
-  - delete
-  - list
-  - watch
-  - update
+  - apiGroups:
+      - ""
+    resources:
+      - secrets
+    verbs:
+      - create
+      - delete
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - pods/log
+    verbs:
+      - get
+      - create
+      - delete
+      - list
+      - watch
+      - update

files/drone-runner/drone-runner-RoleBinding.yaml

@@ -1,13 +1,21 @@
+# Source: drone-runner-kube/templates/rbac.yaml
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: drone-runner
-  namespace: drone
+  name: drone-runner-kube
+  namespace: "drone-runner"
+  labels:
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 subjects:
-- kind: ServiceAccount
-  name: drone-runner
-  namespace: drone
+  - kind: ServiceAccount
+    name: drone-runner-kube
+    namespace: drone
 roleRef:
   kind: Role
-  name: drone-runner
+  name: drone-runner-kube
   apiGroup: rbac.authorization.k8s.io

files/drone-runner/drone-runner-Service.yaml

@@ -0,0 +1,24 @@
+# Source: drone-runner-kube/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: drone-runner-kube
+  namespace: drone
+  labels:
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: ClusterIP
+  ports:
+    - port: 3000
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube

files/drone-runner/drone-runner-ServiceAccount.yaml

@@ -1,5 +1,13 @@
+# Source: drone-runner-kube/templates/rbac.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
+  name: drone-runner-kube
   namespace: drone
-  name: drone-runner
+  labels:
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm

files/drone-runner/drone-runner.yaml

@@ -1,27 +1,60 @@
+# Source: drone-runner-kube/templates/deployment.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: drone-runner
+  name: drone-runner-kube
   namespace: drone
   labels:
-    app.kubernetes.io/name: drone
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
   selector:
     matchLabels:
-      app.kubernetes.io/name: drone
+      app.kubernetes.io/name: drone-runner-kube
+      app.kubernetes.io/instance: drone
+      app.kubernetes.io/component: drone-runner-kube
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: drone
+        app.kubernetes.io/name: drone-runner-kube
+        app.kubernetes.io/instance: drone
+        app.kubernetes.io/component: drone-runner-kube
+      annotations:
+        checksum/secrets: b814aeaecb42fa8651875d365b7bd4251112dc6fde7b1c82a41a5f37cdb9f34a
     spec:
+      serviceAccountName: drone-runner-kube
+      securityContext:
+        fsGroup: 2000
+      terminationGracePeriodSeconds: 3600
       containers:
-      - name: drone-runner
-        image: drone/drone-runner-kube:latest
-        ports:
-        - containerPort: 3000
-        envFrom:
-          - configMapRef:
-              name: drone-runner
-          - secretRef:
-              name: drone-runner
+        - name: server
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 1000
+          image: "drone/drone-runner-kube:1.0.0-beta.1"
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 3000
+              protocol: TCP
+          resources:
+            limits:
+              cpu: 100m
+              memory: 128Mi
+            requests:
+              cpu: 100m
+              memory: 128Mi
+          envFrom:
+            - configMapRef:
+                name: drone-runner-kube
+            - secretRef:
+                name: drone-runner