fix(garm): 🔧 sync sizer-receiver template with production config and bump garm tag to v0.1.7-forgejo-13

template/stacks/garm/garm/values.yaml

@@ -26,7 +26,7 @@ credentials:
 
 image:
   repository: {{{ .Env.CLIENT_REPO_DOMAIN }}}/devfw-cicd/garm-forgejo
-  tag: v0.1.7-forgejo-1
+  tag: v0.1.7-forgejo-13
 
 providerConfig:
   edgeConnect:

template/stacks/garm/sizer-receiver/deployment.yaml

@@ -5,6 +5,8 @@ metadata:
   labels:
     app: sizer-receiver
 spec:
+  strategy:
+    type: Recreate
   replicas: 1
   selector:
     matchLabels:
@@ -14,9 +16,12 @@ spec:
       labels:
         app: sizer-receiver
     spec:
+      securityContext:
+        fsGroup: 65534
       containers:
         - name: receiver
-          image: edp.buildth.ing/devfw-cicd/forgejo-runner-sizer-receiver:0.0.4
+          image: edp.buildth.ing/devfw-cicd/forgejo-runner-sizer-receiver:latest
+          imagePullPolicy: Always
           args:
             - --db=/data/metrics.db
           ports:
@@ -34,6 +39,30 @@ spec:
                 secretKeyRef:
                   name: sizer-tokens
                   key: hmac-key
+            - name: GARM_URL
+              value: "http://garm.garm.svc.cluster.local:80"
+            - name: GARM_USER
+              value: "admin"
+            - name: GARM_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: garm-fixed-credentials
+                  key: admin_password
+            - name: RECEIVER_OIDC_ISSUER
+              value: "https://dex.{{{ .Env.DOMAIN }}}"
+            - name: RECEIVER_OIDC_CLIENT_ID
+              value: "forgejo-runner-sizer"
+            - name: RECEIVER_OIDC_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: sizer-oidc-client
+                  key: client-secret
+            - name: RECEIVER_OIDC_REDIRECT_URI
+              value: "https://sizer.{{{ .Env.DOMAIN }}}/ui/callback"
+            - name: RECEIVER_SESSION_TTL
+              value: "12h"
+            - name: RECEIVER_ALLOWED_ORG
+              value: "DevFW"
           volumeMounts:
             - name: data
               mountPath: /data