Gate Kubernetes nodeSelector backend step config behind agent config (#6809)

Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Lauris B <lauris@nix.lv>
This commit is contained in:
kt
2026-07-06 03:06:31 +02:00
committed by GitHub
co-authored by 6543 Lauris B
parent c0aec32051
commit 4fada4b5d5
6 changed files with 90 additions and 18 deletions
@@ -607,6 +607,15 @@ Additional node selector to apply to worker pods. Must be a YAML object, e.g. `{
---
### BACKEND_K8S_POD_NODE_SELECTOR_ALLOW_FROM_STEP
- Name: `WOODPECKER_BACKEND_K8S_POD_NODE_SELECTOR_ALLOW_FROM_STEP`
- Default: `false`
Determines if the Pod `nodeSelector` can be defined from a step's backend options. Disabled by default, as it would otherwise let any user with push access pin pipeline pods onto chosen nodes.
---
### BACKEND_K8S_SECCTX_NONROOT <!-- cspell:ignore SECCTX NONROOT -->
- Name: `WOODPECKER_BACKEND_K8S_SECCTX_NONROOT`