Add GitLab Runner integration #711

jangel97 · 2026-01-19T15:00:30Z

Add GitLab Runner integration to mapt

This PR adds native GitLab Runner support to mapt, allowing automatic runner registration on provisioned hosts and automatic creation of the gitlab runner on the gitlab server.

At the moment, the integration is limited to infrastructure-based platforms and does not support container-based deployments.

Features

New CLI flags:
- --glrunner-token
- --glrunner-url
Automatic, non-interactive GitLab Runner registration
Shell executor support (only executor supported for now)
Runner name automatically generated from the mapt run ID

Implementation details

Introduced pkg/integrations/gitlab/ with platform-specific bootstrap snippets
Added GitLab runner flags to CLI parameter handling
Integrated GitLab runner setup into cloud-config for:
- RHEL
- Fedora
- Windows
Updated context manager to initialize the GitLab integration
Extended all host provisioning commands to support GitLab runner parameters

Technical notes

Runner binaries are downloaded from GitLab’s official distribution bucket
Registration is performed non-interactively using an authentication token
Service installation is platform-specific:
- systemd on Linux
- LaunchDaemon on macOS
- Windows service on Windows
Runner configuration such as tags, executor settings, and scope are intentionally managed from the GitLab UI rather than via CLI

Example usage

  ./out/mapt aws fedora create \
    --glrunner-token ${GITLAB_TOKEN} \
    --glrunner-group-id ${GITLAB_GROUP_ID} \
    --glrunner-url https://gitlab.com \
    --glrunner-tags linux,aws,fedora \
    --project-name test-gitlab-runner \
    --backed-url file:///$PWD/state \
    --conn-details-output $PWD/outputs

Supported platforms

AWS

Fedora
RHEL
Windows
macOS

Azure

RHEL
Windows

Fixes #500

adrianriobo · 2026-01-19T17:32:22Z

pkg/integrations/gitlab/glrunner.go

+)
+
+// Download URL
+const runnerBaseURL = "https://gitlab-runner-downloads.s3.amazonaws.com/latest/binaries/gitlab-runner-%s-%s"


Here I would prefer fixed version...you can pick it from a var and move it through the Makefile so we can update when new version is released.

Cause using latest we can no be sure which version we are shipping

Good point. I added the following changes:

Default version: 18.8.0 (variable in glrunner.go)

Downloads from: https://gitlab-runner-downloads.s3.amazonaws.com/v18.8.0/binaries/...

Build overrides: Makefile injects the version via ldflags at compile time (similar to how GITHUB_RUNNER parameter works)

Auto-updates: Renovate bot will create PRs when new GitLab Runner versions are released (similar to how it works in renovate configuration)

adrianriobo · 2026-01-20T15:38:27Z

cmd/mapt/cmd/params/params.go

 	cirrusPWLabels     string = "it-cirrus-pw-labels"
 	cirrusPWLabelsDesc string = "additional labels to use on the persistent worker (--it-cirrus-pw-labels key1=value1,key2=value2)"

+	glRunnerToken      string = "glrunner-token"


I think labels should be needed, as we need to control them to distribute jobs from gitlab as we do currently

Thanks for pointing it out! i just added a new flag --glrunner-tags in order to allow adding tags to the gitlab runner instance.

adrianriobo

I think you would need to add the provider within the Containerfile check

mapt/oci/Containerfile

Line 47 in 0552e2c

ARG PULUMI_AWS_NATIVE_VERSION=v1.49.0

and

mapt/oci/Containerfile

Line 59 in 0552e2c

&& pulumi plugin install resource aws-native ${PULUMI_AWS_NATIVE_VERSION} \

adrianriobo · 2026-01-22T12:00:38Z

pkg/provider/aws/action/fedora/fedora.go

-		return err
+
+	// Generate userdata - if GitLab runner args present, create runner via Pulumi first
+	var userDataB64 pulumi.StringPtrInput


Why is this here, the logic should be moved to the fedora helper... you can do the check there and add the content

Good point, I’ve moved the logic into the Fedora helper.

Added GenerateUserdata in the Fedora helper to handle the GitLab runner check and userdata generation

The action now just calls this helper instead of containing conditional logic

This should keep the action layer thin and centralize Fedora-specific logic in one place.

adrianriobo · 2026-01-22T13:21:32Z

pkg/provider/aws/action/rhel/rhel.go

-	userDataB64, err := rhelCloudConfig.CloudConfig()
-	if err != nil {
-		return err
+


Here same as fedora no?

adrianriobo · 2026-01-22T13:22:20Z

pkg/provider/aws/action/windows/windows.go

 	}
-	userDataB64, err := cloudConfigWindowsServer.Userdata(ctx, &amiUserDefault, password, keyResources)
-	if err != nil {
-		return err


Here same as others

adrianriobo · 2026-01-22T13:24:59Z

pkg/provider/aws/modules/mac/machine/machine.go


-			if r.isRequestOperation {
-				return macSetup.Request(
+	// Check if GitLab runner args exist


Here the same

adrianriobo · 2026-01-22T13:25:42Z

pkg/provider/azure/action/linux/linux.go

-		userDataB64, err = r.cloudConfigAsUserData.CloudConfig()
-		if err != nil {
-			return fmt.Errorf("error creating RHEL Server on Azure: %v", err)
+		// Check if this is RHEL cloud config and GitLab runner args exist


Migrate GitLab Runner integration from registration token workflow to authentication token workflow using Pulumi's GitLab provider. This aligns with GitLab 16.0+ recommended practices and enables programmatic runner creation. Changes: - --glrunner-token now expects GitLab PAT (api/create_runner scope) - New flags: --glrunner-project-id and --glrunner-group-id - Removed flags: --glrunner-executor, --glrunner-tags, --glrunner-scope Features: - Support for both project runners and group runners - Automatic runner creation via Pulumi during stack deployment - Runner configuration managed as code (tags, executor, access level) - Auto-detection of runner type based on ID provided Implementation: - Created pkg/integrations/gitlab/pulumi.go for Pulumi GitLab provider - Updated GitLabRunnerArgs with GitLabPAT, ProjectID, GroupID, AuthToken - Added SetAuthToken() for dynamic token injection during deployment - Implemented UserdataWithGitLabToken() for async token handling - Updated AWS Fedora provider to create runner before userdata generation - Modified CLI params to support new flag structure Usage: ./mapt aws fedora create \ --glrunner-token <gitlab-pat> \ --glrunner-group-id 12345 \ --glrunner-url https://gitlab.com Signed-off-by: Jose Angel Morena <[email protected]>

adrianriobo reviewed Jan 19, 2026

View reviewed changes

jangel97 marked this pull request as draft January 19, 2026 17:40

openshift-ci bot added the do-not-merge/work-in-progress label Jan 19, 2026

jangel97 force-pushed the gitlab branch 4 times, most recently from 56534ac to e44f12a Compare January 20, 2026 14:46

adrianriobo reviewed Jan 20, 2026

View reviewed changes

jangel97 force-pushed the gitlab branch from e44f12a to 37149cd Compare January 21, 2026 09:03

jangel97 marked this pull request as ready for review January 21, 2026 09:28

openshift-ci bot removed the do-not-merge/work-in-progress label Jan 21, 2026

adrianriobo reviewed Jan 22, 2026

View reviewed changes

jangel97 force-pushed the gitlab branch from 37149cd to 1472a5a Compare January 22, 2026 11:52

adrianriobo reviewed Jan 22, 2026

View reviewed changes

jangel97 force-pushed the gitlab branch from 1472a5a to d14591c Compare January 22, 2026 13:02

adrianriobo reviewed Jan 22, 2026

View reviewed changes

jangel97 force-pushed the gitlab branch from d14591c to a7e5438 Compare January 22, 2026 14:27

jangel97 force-pushed the gitlab branch from a7e5438 to 396ba99 Compare January 22, 2026 14:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Add GitLab Runner integration #711

Add GitLab Runner integration #711

jangel97 commented Jan 19, 2026 •

edited

Loading

Uh oh!

adrianriobo Jan 19, 2026

Uh oh!

jangel97 Jan 20, 2026

Uh oh!

adrianriobo Jan 20, 2026

Uh oh!

jangel97 Jan 21, 2026

Uh oh!

adrianriobo left a comment

Uh oh!

adrianriobo Jan 22, 2026

Uh oh!

jangel97 Jan 22, 2026

Uh oh!

adrianriobo Jan 22, 2026

Uh oh!

adrianriobo Jan 22, 2026

Uh oh!

adrianriobo Jan 22, 2026

Uh oh!

adrianriobo Jan 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Add GitLab Runner integration #711

Are you sure you want to change the base?

Add GitLab Runner integration #711

Conversation

jangel97 commented Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Add GitLab Runner integration to mapt

Features

Implementation details

Technical notes

Example usage

Supported platforms

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

adrianriobo left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

jangel97 commented Jan 19, 2026 •

edited

Loading