# concurrent = 1
# log_level = "debug"

[[runners]]
  # name = "..."
  # url = "https://.../ci"
  # token = "..."
  executor = "kubernetes"

  [runners.kubernetes]
    image = "ubuntu:bionic"
    namespace = "default"
    privileged = false
    # helper_image = ""
    # helper_image_flavor = "ubuntu"
    pull_policy = "always"

    cpu_limit = "2"
    cpu_limit_overwrite_max_allowed = "4"
    cpu_request = "2"
    cpu_request_overwrite_max_allowed = "4"
    helper_cpu_limit = "250m"
    helper_cpu_limit_overwrite_max_allowed = "1"
    helper_cpu_request = "250m"
    helper_cpu_request_overwrite_max_allowed = "1"
    service_cpu_limit = "1"
    service_cpu_limit_overwrite_max_allowed = "2"
    service_cpu_request = "1"
    service_cpu_request_overwrite_max_allowed = "2"
    memory_limit = "8Gi"
    memory_limit_overwrite_max_allowed = "32Gi"
    memory_request = "8Gi"
    memory_request_overwrite_max_allowed = "32Gi"
    helper_memory_limit = "512Mi"
    helper_memory_limit_overwrite_max_allowed = "4Gi"
    helper_memory_request = "512Mi"
    helper_memory_request_overwrite_max_allowed = "4Gi"
    service_memory_limit = "2Gi"
    service_memory_limit_overwrite_max_allowed = "8Gi"
    service_memory_request = "2Gi"
    service_memory_request_overwrite_max_allowed = "8Gi"
    ephemeral_storage_limit = "10Gi"
    ephemeral_storage_limit_overwrite_max_allowed = "10Gi"
    ephemeral_storage_request = "10Gi"
    ephemeral_storage_request_overwrite_max_allowed = "10Gi"
    helper_ephemeral_storage_limit = "10Gi"
    helper_ephemeral_storage_limit_overwrite_max_allowed = "10Gi"
    helper_ephemeral_storage_request = "10Gi"
    helper_ephemeral_storage_request_overwrite_max_allowed = "10Gi"
    service_ephemeral_storage_limit = "10Gi"
    service_ephemeral_storage_limit_overwrite_max_allowed = "10Gi"
    service_ephemeral_storage_request = "10Gi"
    service_ephemeral_storage_request_overwrite_max_allowed = "10Gi"

    [runners.kubernetes.pod_annotations]
      # for img
      "container.apparmor.security.beta.kubernetes.io/build" = "unconfined"
      "container.seccomp.security.alpha.kubernetes.io/build" = "unconfined"