Автомасштабирование GitLab Runner в AWS: экономим на EC2

curl -L "https://packages.gitlab.com/install/repositories/runner/gitlab-runner/script.deb.sh" -o gitlab-repo-add.sh
less gitlab-repo-add.sh # проверьте содержимое скрипта, прежде чем запускать
sudo bash gitlab-repo-add.sh
sudo apt-get install -y gitlab-runner

[default]
aws_access_key_id = ...
aws_secret_access_key = ...

{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"autoscaling:SetDesiredCapacity",
"autoscaling:TerminateInstanceInAutoScalingGroup"
],
"Resource": "arn:aws:autoscaling:eu-central-1:{$ACCOUNT_ID}:autoScalingGroup:...:autoScalingGroupName/gitlab-runner-ao-group"
},
{
"Effect": "Allow",
"Action": [
"autoscaling:DescribeAutoScalingGroups",
"ec2:DescribeInstances"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"ec2:GetPasswordData",
"ec2-instance-connect:SendSSHPublicKey"
],
"Resource": "arn:aws:ec2:eu-central-1:{$ACCOUNT_ID}:instance/*",
"Condition": {
"StringEquals": {
"ec2:ResourceTag/aws:autoscaling:groupName": "gitlab-runner-ao-group"
}
}
}
]
}

# Устанавливаем Fleeting Plugin для AWS
echo "Installing Fleeting Plugin..."
sudo gitlab-runner fleeting install aws:latest
# Создаём директорию и файлы для AWS credentials
sudo mkdir -p /home/gitlab-runner/.aws
sudo chown gitlab-runner:gitlab-runner /home/gitlab-runner/.aws
# Создаём файл credentials с ключами для S3-кеша
sudo tee /home/gitlab-runner/.aws/credentials > /dev/null <<'EOF'
[default]
aws_access_key_id = ${aws_s3_cache_access_key}
aws_secret_access_key = ${aws_s3_cache_secret_key}
EOF
sudo tee /home/gitlab-runner/.aws/config > /dev/null <<'EOF'
[default]
region = eu-central-1
output = json
EOF
sudo chown -R gitlab-runner:gitlab-runner /home/gitlab-runner/.aws
sudo chmod 600 /home/gitlab-runner/.aws/credentials
sudo chmod 600 /home/gitlab-runner/.aws/config

listen_address = ":9252"
concurrent = 200
check_interval = 0
connection_max_age = "30m0s"
shutdown_timeout = 0
log_level = "info"
log_format = "text"
[session_server]
session_timeout = 1800
# Раннер типа instance — запускает джобы прямо на EC2-инстансах (через shell)
[[runners]]
name = "${runner_name}"
id = 400
output_limit = 50000
url = "${gitlab_url}"
token = "${registration_token}"
token_obtained_at = 2026-02-01T12:42:42Z
token_expires_at = 0001-01-01T00:00:00Z
executor = "instance"
# S3-кеш для ускорения сборок
[runners.cache]
Type = "s3"
Path = "cache"
Shared = true
MaxUploadedArchiveSize = 0
[runners.cache.s3]
ServerAddress = "s3.amazonaws.com"
AccessKey = "${aws_s3_cache_access_key}"
SecretKey = "${aws_s3_cache_secret_key}"
BucketName = "walli-gitlab-runner-cache"
BucketLocation = "eu-central-1"
[runners.autoscaler]
capacity_per_instance = ${capacity_per_instance}
max_use_count = ${max_use_count}
max_instances = ${max_instances}
plugin = "aws:latest"
instance_acquire_timeout = "0s"
update_interval = "0s"
update_interval_when_expecting = "0s"
[runners.autoscaler.plugin_config]
name = "gitlab-runner-ao-group2"
profile = "default"
[runners.autoscaler.connector_config]
protocol_port = 0
username = "gitlab-runner"
keepalive = "0s"
timeout = "0s"
[[runners.autoscaler.policy]]
idle_count = ${idle_count}
idle_time = "${idle_time}"
scale_factor = 1.5
scale_factor_limit = 10
[[runners.autoscaler.policy]]
periods = ["* 10-18 * * mon-fri"]
idle_count = 20
idle_time = "${idle_time}"
scale_factor = 1.5
scale_factor_limit = 10
# Экзекьютор docker-autoscaler — для контейнерных джобов
[[runners]]
name = "${runner_name}"
id = 401
url = "${gitlab_url}"
token = "${docker_registration_token}"
token_obtained_at = 2026-02-01T12:43:43Z
token_expires_at = 0001-01-01T00:00:00Z
executor = "docker-autoscaler"
environment = ["DOCKER_AUTH_CONFIG={\"auths\":{\"${docker_registry_url}\":{\"auth\":\"${docker_registry_auth}\"}}}"]
# S3-кеш для ускорения сборок
[runners.cache]
Type = "s3"
Path = "cache"
Shared = true
MaxUploadedArchiveSize = 0
[runners.cache.s3]
ServerAddress = "s3.amazonaws.com"
AccessKey = "${aws_s3_cache_access_key}"
SecretKey = "${aws_s3_cache_secret_key}"
BucketName = "walli-gitlab-runner-cache"
BucketLocation = "eu-central-1"
[runners.docker]
tls_verify = false
image = "ubuntu:24.04"
privileged = true
disable_entrypoint_overwrite = false
oom_kill_disable = false
disable_cache = false
volumes = ["/var/run/docker.sock:/var/run/docker.sock", "/cache"]
extra_hosts = ${jsonencode(extra_hosts)}
shm_size = 0
network_mtu = 0
[runners.autoscaler]
capacity_per_instance = 5
max_use_count = 30
max_instances = 25
plugin = "aws:latest"
update_interval = "0s"
update_interval_when_expecting = "0s"
[runners.autoscaler.plugin_config]
name = "gitlab-runner-ao-group-docker2"
profile = "default"
[runners.autoscaler.connector_config]
username = "gitlab-runner"
keepalive = "0s"
timeout = "0s"
[[runners.autoscaler.policy]]
periods = ["* * * * *"]
idle_count = 1
idle_time = "20m0s"
scale_factor = 1.5
scale_factor_limit = 10
[[runners.autoscaler.policy]]
periods = ["* 10-18 * * mon-fri"]
idle_count = 20
idle_time = "20m0s"
scale_factor = 1.5
scale_factor_limit = 10