Update manifest

files/drone-runner/drone-runner-ConfigMap.yaml

@@ -1,17 +1,20 @@
+# Source: drone-runner-kube/templates/configmap.yaml
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: drone-runner
+  name: drone-runner-kube
   namespace: drone
   labels:
-    app.kubernetes.io/name: drone
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
     app.kubernetes.io/instance: drone
-    app.kubernetes.io/component: server
+    app.kubernetes.io/component: drone-runner-kube
-    app.kubernetes.io/version: "1.6.5"
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 data:
   DRONE_RPC_HOST: "drone.reslinger.net"
   DRONE_RPC_PROTO: "https"
   DRONE_UI_DISABLE: "true"
   DRONE_RUNNER_CAPACITY: "2"
-  DRONE_NAMESPACE_DEFAULT: "drone"
+  DRONE_NAMESPACE_DEFAULT: "drone-runner"
-  DRONE_SERVICE_ACCOUNT_DEFAULT: "drone-runner"
+#  DRONE_SERVICE_ACCOUNT_DEFAULT: "drone-runner"

files/drone-runner/drone-runner-Role.yaml

@@ -1,17 +1,25 @@
+# Source: drone-runner-kube/templates/rbac.yaml
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  namespace: drone
+  name: drone-runner-kube
-  name: drone-runner
+  namespace: "drone-runner"
+  labels:
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 rules:
-- apiGroups:
+  - apiGroups:
       - ""
     resources:
       - secrets
     verbs:
       - create
       - delete
-- apiGroups:
+  - apiGroups:
       - ""
     resources:
       - pods

files/drone-runner/drone-runner-RoleBinding.yaml

@@ -1,13 +1,21 @@
+# Source: drone-runner-kube/templates/rbac.yaml
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: drone-runner
+  name: drone-runner-kube
-  namespace: drone
+  namespace: "drone-runner"
+  labels:
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 subjects:
-- kind: ServiceAccount
+  - kind: ServiceAccount
-  name: drone-runner
+    name: drone-runner-kube
     namespace: drone
 roleRef:
   kind: Role
-  name: drone-runner
+  name: drone-runner-kube
   apiGroup: rbac.authorization.k8s.io

files/drone-runner/drone-runner-Service.yaml

@@ -0,0 +1,24 @@
+# Source: drone-runner-kube/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: drone-runner-kube
+  namespace: drone
+  labels:
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: ClusterIP
+  ports:
+    - port: 3000
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube

files/drone-runner/drone-runner-ServiceAccount.yaml

@@ -1,5 +1,13 @@
+# Source: drone-runner-kube/templates/rbac.yaml
 apiVersion: v1
 kind: ServiceAccount
 metadata:
+  name: drone-runner-kube
   namespace: drone
-  name: drone-runner
+  labels:
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm

files/drone-runner/drone-runner.yaml

@@ -1,27 +1,60 @@
+# Source: drone-runner-kube/templates/deployment.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: drone-runner
+  name: drone-runner-kube
   namespace: drone
   labels:
-    app.kubernetes.io/name: drone
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
   selector:
     matchLabels:
-      app.kubernetes.io/name: drone
+      app.kubernetes.io/name: drone-runner-kube
+      app.kubernetes.io/instance: drone
+      app.kubernetes.io/component: drone-runner-kube
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: drone
+        app.kubernetes.io/name: drone-runner-kube
+        app.kubernetes.io/instance: drone
+        app.kubernetes.io/component: drone-runner-kube
+      annotations:
+        checksum/secrets: b814aeaecb42fa8651875d365b7bd4251112dc6fde7b1c82a41a5f37cdb9f34a
     spec:
+      serviceAccountName: drone-runner-kube
+      securityContext:
+        fsGroup: 2000
+      terminationGracePeriodSeconds: 3600
       containers:
-      - name: drone-runner
+        - name: server
-        image: drone/drone-runner-kube:latest
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 1000
+          image: "drone/drone-runner-kube:1.0.0-beta.1"
+          imagePullPolicy: IfNotPresent
           ports:
-        - containerPort: 3000
+            - name: http
+              containerPort: 3000
+              protocol: TCP
+          resources:
+            limits:
+              cpu: 100m
+              memory: 128Mi
+            requests:
+              cpu: 100m
+              memory: 128Mi
           envFrom:
             - configMapRef:
-              name: drone-runner
+                name: drone-runner-kube
             - secretRef:
                 name: drone-runner

tasks/main.yml

@@ -40,6 +40,7 @@
         - drone-runner/drone-runner-Role.yaml
         - drone-runner/drone-runner-RoleBinding.yaml
         - drone-runner/drone-runner-ConfigMap.yaml
+        - drone-runner/drone-runner-Service.yaml
         - drone-runner/drone-runner.yaml
     - name: Install Drone Runner static files
       k8s: