gistfile1.txt

# These affect ONLY the runner-manager
envVars:
  - name: HTTP_PROXY
    value: http://proxy.example.internal:3128
  - name: HTTPS_PROXY
    value: http://proxy.example.internal:3128

  # Critically: keep Kubernetes out of the proxy.
  - name: NO_PROXY
    value: "localhost,127.0.0.1,10.96.0.1,.svc,.cluster.local"

runners:
  config: |
    [[runners]]
      environment = ["FF_USE_ADVANCED_POD_SPEC_CONFIGURATION=true"]

      [runners.kubernetes]
        namespace = "gitlab-runner"

        # Only the GitLab helper gets the proxy.
        [[runners.kubernetes.pod_spec]]
          name = "helper-proxy"
          patch_type = "strategic"
          patch = '''
            containers:
            - name: helper
              env:
              - name: HTTP_PROXY
                value: "http://proxy.example.internal:3128"
              - name: HTTPS_PROXY
                value: "http://proxy.example.internal:3128"
          '''