Skip to content

fix: add pid_mode as an optional field to runner_worker_docker_options #1380

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cmpoon wants to merge 2 commits into
base: main
Choose a base branch
from
+2 −1
Open

fix: add pid_mode as an optional field to runner_worker_docker_options #1380

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
7ae8218
Add pid_mode as an optional field to runner_worker_docker_options
cmpoon Jun 25, 2026
11ee97f
Update runner_worker_docker_options TF documentation
cmpoon Jun 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -240,7 +240,7 @@ This project is licensed under the MIT License - see the [LICENSE](LICENSE) file
| <a name="input_runner_worker_docker_machine_instance_spot"></a> [runner\_worker\_docker\_machine\_instance\_spot](#input\_runner\_worker\_docker\_machine\_instance\_spot) | enable = Enable spot instances for the Runner Worker.<br/>max\_price = The maximum price willing to pay. By default the price is limited by the current on demand price for the instance type chosen. | <pre>object({<br/> enable = optional(bool, true)<br/> max_price = optional(string, "on-demand-price")<br/> })</pre> | `{}` | no |
| <a name="input_runner_worker_docker_machine_role"></a> [runner\_worker\_docker\_machine\_role](#input\_runner\_worker\_docker\_machine\_role) | additional\_tags = Map of tags that will be added to the Runner Worker.<br/>assume\_role\_policy\_json = Assume role policy for the Runner Worker.<br/>policy\_arns = List of ARNs of IAM policies to attach to the Runner Workers.<br/>profile\_name = Name of the IAM profile to attach to the Runner Workers. | <pre>object({<br/> additional_tags = optional(map(string), {})<br/> assume_role_policy_json = optional(string, "")<br/> policy_arns = optional(list(string), [])<br/> profile_name = optional(string, "")<br/> })</pre> | `{}` | no |
| <a name="input_runner_worker_docker_machine_security_group_description"></a> [runner\_worker\_docker\_machine\_security\_group\_description](#input\_runner\_worker\_docker\_machine\_security\_group\_description) | A description for the Runner Worker security group | `string` | `"A security group containing Runner Worker instances"` | no |
| <a name="input_runner_worker_docker_options"></a> [runner\_worker\_docker\_options](#input\_runner\_worker\_docker\_options) | Options added to the [runners.docker] section of config.toml to configure the Docker container of the Runner Worker. For<br/> details check https://docs.gitlab.com/runner/configuration/advanced-configuration.html<br/><br/> Default values if the option is not given:<br/> disable\_cache = "false"<br/> image = "docker:18.03.1-ce"<br/> privileged = "true"<br/> pull\_policy = "always"<br/> shm\_size = 0<br/> tls\_verify = "false"<br/> volumes = "/cache" | <pre>object({<br/> allowed_images = optional(list(string))<br/> allowed_pull_policies = optional(list(string))<br/> allowed_services = optional(list(string))<br/> cache_dir = optional(string)<br/> cap_add = optional(list(string))<br/> cap_drop = optional(list(string))<br/> container_labels = optional(list(string))<br/> cpuset_cpus = optional(string)<br/> cpu_shares = optional(number)<br/> cpus = optional(string)<br/> devices = optional(list(string))<br/> device_cgroup_rules = optional(list(string))<br/> disable_cache = optional(bool, false)<br/> disable_entrypoint_overwrite = optional(bool)<br/> dns = optional(list(string))<br/> dns_search = optional(list(string))<br/> extra_hosts = optional(list(string))<br/> gpus = optional(string)<br/> helper_image = optional(string)<br/> helper_image_flavor = optional(string)<br/> host = optional(string)<br/> hostname = optional(string)<br/> image = optional(string, "docker:18.03.1-ce")<br/> isolation = optional(string)<br/> links = optional(list(string))<br/> mac_address = optional(string)<br/> memory = optional(string)<br/> memory_swap = optional(string)<br/> memory_reservation = optional(string)<br/> network_mode = optional(string)<br/> oom_kill_disable = optional(bool)<br/> oom_score_adjust = optional(number)<br/> privileged = optional(bool, true)<br/> pull_policies = optional(list(string), ["always"])<br/> runtime = optional(string)<br/> security_opt = optional(list(string))<br/> shm_size = optional(number, 0)<br/> sysctls = optional(list(string))<br/> tls_cert_path = optional(string)<br/> tls_verify = optional(bool, false)<br/> user = optional(string)<br/> userns_mode = optional(string)<br/> volumes = optional(list(string), ["/cache"])<br/> volumes_from = optional(list(string))<br/> volume_driver = optional(string)<br/> wait_for_services_timeout = optional(number)<br/> })</pre> | <pre>{<br/> "disable_cache": "false",<br/> "image": "docker:18.03.1-ce",<br/> "privileged": "true",<br/> "pull_policies": [<br/> "always"<br/> ],<br/> "shm_size": 0,<br/> "tls_verify": "false",<br/> "volumes": [<br/> "/cache"<br/> ]<br/>}</pre> | no |
| <a name="input_runner_worker_docker_options"></a> [runner\_worker\_docker\_options](#input\_runner\_worker\_docker\_options) | Options added to the [runners.docker] section of config.toml to configure the Docker container of the Runner Worker. For<br/> details check https://docs.gitlab.com/runner/configuration/advanced-configuration.html<br/><br/> Default values if the option is not given:<br/> disable\_cache = "false"<br/> image = "docker:18.03.1-ce"<br/> privileged = "true"<br/> pull\_policy = "always"<br/> shm\_size = 0<br/> tls\_verify = "false"<br/> volumes = "/cache" | <pre>object({<br/> allowed_images = optional(list(string))<br/> allowed_pull_policies = optional(list(string))<br/> allowed_services = optional(list(string))<br/> cache_dir = optional(string)<br/> cap_add = optional(list(string))<br/> cap_drop = optional(list(string))<br/> container_labels = optional(list(string))<br/> cpuset_cpus = optional(string)<br/> cpu_shares = optional(number)<br/> cpus = optional(string)<br/> devices = optional(list(string))<br/> device_cgroup_rules = optional(list(string))<br/> disable_cache = optional(bool, false)<br/> disable_entrypoint_overwrite = optional(bool)<br/> dns = optional(list(string))<br/> dns_search = optional(list(string))<br/> extra_hosts = optional(list(string))<br/> gpus = optional(string)<br/> helper_image = optional(string)<br/> helper_image_flavor = optional(string)<br/> host = optional(string)<br/> hostname = optional(string)<br/> image = optional(string, "docker:18.03.1-ce")<br/> isolation = optional(string)<br/> links = optional(list(string))<br/> mac_address = optional(string)<br/> memory = optional(string)<br/> memory_swap = optional(string)<br/> memory_reservation = optional(string)<br/> network_mode = optional(string)<br/> oom_kill_disable = optional(bool)<br/> oom_score_adjust = optional(number)<br/> pid_mode = optional(string)<br/> privileged = optional(bool, true)<br/> pull_policies = optional(list(string), ["always"])<br/> runtime = optional(string)<br/> security_opt = optional(list(string))<br/> shm_size = optional(number, 0)<br/> sysctls = optional(list(string))<br/> tls_cert_path = optional(string)<br/> tls_verify = optional(bool, false)<br/> user = optional(string)<br/> userns_mode = optional(string)<br/> volumes = optional(list(string), ["/cache"])<br/> volumes_from = optional(list(string))<br/> volume_driver = optional(string)<br/> wait_for_services_timeout = optional(number)<br/> })</pre> | <pre>{<br/> "disable_cache": "false",<br/> "image": "docker:18.03.1-ce",<br/> "privileged": "true",<br/> "pull_policies": [<br/> "always"<br/> ],<br/> "shm_size": 0,<br/> "tls_verify": "false",<br/> "volumes": [<br/> "/cache"<br/> ]<br/>}</pre> | no |
| <a name="input_runner_worker_docker_services"></a> [runner\_worker\_docker\_services](#input\_runner\_worker\_docker\_services) | Starts additional services with the Docker container. All fields must be set (examine the Dockerfile of the service image for the entrypoint - see ./examples/runner-default/main.tf) | <pre>list(object({<br/> name = string<br/> alias = string<br/> entrypoint = list(string)<br/> command = list(string)<br/> }))</pre> | `[]` | no |
| <a name="input_runner_worker_docker_services_volumes_tmpfs"></a> [runner\_worker\_docker\_services\_volumes\_tmpfs](#input\_runner\_worker\_docker\_services\_volumes\_tmpfs) | Mount a tmpfs in gitlab service container. https://docs.gitlab.com/runner/executors/docker.html#mounting-a-directory-in-ram | <pre>list(object({<br/> volume = string<br/> options = string<br/> }))</pre> | `[]` | no |
| <a name="input_runner_worker_docker_volumes_tmpfs"></a> [runner\_worker\_docker\_volumes\_tmpfs](#input\_runner\_worker\_docker\_volumes\_tmpfs) | Mount a tmpfs in Executor container. https://docs.gitlab.com/runner/executors/docker.html#mounting-a-directory-in-ram | <pre>list(object({<br/> volume = string<br/> options = string<br/> }))</pre> | `[]` | no |
Expand Down
1 change: 1 addition & 0 deletions variables.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -697,6 +697,7 @@ variable "runner_worker_docker_options" {
network_mode = optional(string)
oom_kill_disable = optional(bool)
oom_score_adjust = optional(number)
pid_mode = optional(string)
privileged = optional(bool, true)
Comment thread
cmpoon marked this conversation as resolved.
pull_policies = optional(list(string), ["always"])
runtime = optional(string)
Expand Down
Loading