Commit Graph

208 Commits

Author SHA1 Message Date
Robert Kaussow
dc7795e64b
Add fsGroupChangePolicy option to Kubernetes backend (#5416)
Co-authored-by: Lilly Sell <sell@b1-systems.de>
2025-08-15 10:28:38 +02:00
scottshotgg
d7495357d5
Add Agent-level Tolerations setting (#5266)
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
2025-08-10 10:12:42 +02:00
Lilly
147256e3a8
feat(k8s): k8s priority class name config (#5391) 2025-08-09 16:33:47 +02:00
Harri Avellan
e9ab04f88b
Support namespace per org for Kubernetes step secrets (#5383)
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
2025-08-05 09:27:18 +02:00
Henrik Huitti
79e4dd5380
feat(k8s): Kubernetes namespace per organization (#5309) 2025-07-22 17:22:26 +03:00
Harri Avellan
5c00b9d74b
Prevent secrets from leaking to Kubernetes API Server logs (#5305) 2025-07-14 17:45:13 +03:00
qwerty287
fe5ea7ad3b
Simplify backend types (#5299) 2025-07-05 12:59:17 +03:00
Patrick Schratz
e92706bfd8
Revert "kubernetes: prevent secrets from leaking to api-server logs" (#5293)
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2025-07-05 09:40:40 +03:00
Harri Avellan
5e052f5579
kube backend: prevent secrets from leaking to Kubernetes apiserver logs (#5196) 2025-06-14 22:44:33 +02:00
renovate[bot]
71f24f5d44
fix(deps): update golang-packages to v28.2.1+incompatible (#5217)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <qwerty287@posteo.de>
2025-06-06 07:20:03 +02:00
Robert Kaussow
496498274c
Use docker go client directly (#5134) 2025-04-26 13:20:36 +02:00
renovate[bot]
c45657721f
fix(deps): update golang-packages (#5121)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
2025-04-25 15:55:30 +03:00
renovate[bot]
e7243e3ff5
fix(deps): update golang-packages (#5111)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
2025-04-22 10:55:07 +02:00
winston
47e6d159d1
add nushell support to local backend (#5043) 2025-04-01 21:02:25 +03:00
Robert Kaussow
286794a800
Bump golangci-lint to v2 (#5034) 2025-03-31 18:55:48 +02:00
Jener Rasmussen
c392250384
Replace illegal characters in Kubernetes labels (#5013)
Co-authored-by: Robert Kaussow <xoxys@rknet.org>
2025-03-25 20:24:55 +01:00
Jener Rasmussen
8d94071e2f
Tag pipeline with source information (#4796)
Co-authored-by: oauth <woodpecker-bot@obermui.de>
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
Co-authored-by: Robert Kaussow <xoxys@rknet.org>
2025-03-22 13:45:44 +01:00
hhomar
f47165ff9f
kubernetes: create service for detached steps (#4892)
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
2025-02-25 07:16:43 +01:00
Robert Kaussow
00aa968afa
Revert "Tag pipeline with source information (#4771)" (#4794) 2025-01-31 14:53:41 +02:00
Jener Rasmussen
846fd8dc51
Tag pipeline with source information (#4771)
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2025-01-30 13:03:58 +01:00
David Muthy
437d6a74a5
chore: fix some function names in comment (#4769)
Signed-off-by: damuzhi0810 <rust@before.tech>
2025-01-23 19:11:36 +02:00
qwerty287
0fba54d3cc
Add hosts for detached steps (#4674) 2025-01-06 18:06:38 +02:00
qwerty287
7c31bcf327
Revert volumes/network list (#4656)
Co-authored-by: Robert Kaussow <xoxys@rknet.org>
Co-authored-by: Patrick Schratz <patrick.schratz@gmail.com>
2025-01-04 11:56:26 +01:00
Anbraten
5d3300824d
Fix workflow volume and network config (#4650) 2025-01-01 16:21:57 +01:00
qwerty287
428ba689cb
Remove workflow-level volumes and networks (#4636) 2024-12-30 10:34:59 +01:00
qwerty287
afa6dee30b
Migrate away from goblin (#4624)
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
2024-12-30 08:08:53 +02:00
qwerty287
fdfabe6368
Support Git as only VCS (#4346)
Co-authored-by: Patrick Schratz <patrick.schratz@gmail.com>
2024-12-27 22:49:19 +01:00
qwerty287
81b74025d4
Update Go imports paths (#4605)
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
2024-12-22 10:44:34 +01:00
qwerty287
1ec785c7e9
Weakly decode backend options (#4577) 2024-12-16 18:37:38 +01:00
Robert Kaussow
fe11db6cd3
Replace discontinued mitchellh/mapstructure by maintained fork (#4573) 2024-12-16 07:41:49 +01:00
Robert Kaussow
786a8fb003
Add user as docker backend_option (#4526) 2024-12-08 12:02:35 +01:00
tsufeki
db45794091
Fix apparmorProfile being ignored when it's the only field (#4507) 2024-12-03 17:29:03 +02:00
6543
f829c07f3a
Docker Backend: fully support windows container (#4381) 2024-11-26 11:48:48 +01:00
6543
ebf9f9ccbb
Add dns config option to official feature set (#4418)
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2024-11-25 17:59:00 +01:00
Patrick Schratz
5d750322bc
Normalize aarch64 -> arm64 for docker backend (#4451) 2024-11-25 16:17:57 +01:00
6543
07baae28af
address review lint issues (#4354) 2024-11-11 15:25:31 +01:00
Patrick Schratz
b5915f605b
fix error="io: read/write on closed pipe" on k8s backend (#4281) 2024-11-08 11:00:03 +01:00
6543
bf5405b6cc
Respect directory option for steps again (#4319) 2024-11-06 23:21:56 +01:00
Patrick Schratz
560eab96f0
Kubernetes | Docker: Add support for rootless images (#4151) 2024-11-02 18:07:27 +01:00
Andrew Melnick
b52b021acb
Implement registries for Kubernetes backend (#4092)
According to [the documentation](https://woodpecker-ci.org/docs/administration/backends/kubernetes#images-from-private-registries), per-organization and per-pipeline registries are currently unsupported for the Kubernetes backend.

This patch implements this missing functionality by creating and deleting a matching secret for each pod with a matched registry, using the same name, labels, and annotations as the pod, and appending it to its `imagePullSecrets` list.

This patch adds tests for the new functionality, and has been manually end-to-end-tested in KinD by using a private image hosted in the matching gitea instance.

This will require updating the matching helm charts to add the create/delete permissions to the agent role, which **is already done**.

close  #2987
2024-09-30 01:03:05 +01:00
6543
6ad20ced5b
Move docker resource limit settings from server to agent (#3174)
so you can set it per agent and not per server
2024-09-26 16:56:59 +01:00
qwerty287
bcecbbd398
Fix lint (#4032) 2024-08-14 22:37:05 +03:00
qwerty287
c0b1d6aaa4
Allow using args in container (#4011) 2024-08-07 21:11:55 +02:00
Thomas Anderson
6c9469f610
Improved Local backend detection (#4006)
Co-authored-by: 6543 <6543@obermui.de>
2024-08-07 12:04:10 +02:00
Thomas Anderson
ca41540151
Switched to profile-based AppArmor configuration (#4008)
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2024-08-06 19:05:04 +02:00
Thomas Anderson
dc10fb95ad
Removed Kubernetes default image pull secret name (#4005)
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2024-08-06 18:47:31 +02:00
Thomas Anderson
c5746ccb50
Fail on InvalidImageName (#4007) 2024-08-06 17:07:07 +02:00
qwerty287
123c4ae03e
Update docker to v27 (#3972) 2024-07-25 00:43:21 +02:00
renovate[bot]
251129a29c
fix(deps): update golang-packages (#3958)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <qwerty287@posteo.de>
2024-07-22 18:18:26 +02:00
6543
b2970dbf0d
Refactor docker backend and add more test coverage (#2700)
collection of some smal nit's and additions of tests
2024-07-21 21:28:10 +02:00