⚠️ Beta: Native Kubernetes executors are in beta. For production workloads, consider deploying using Terraform or the Linux binary for better long-term support.

Executors are Sourcegraph’s solution for running untrusted code in a secure and controllable way. For more information on native kubernetes executors and how they are used see the Executors documentation

This directory contains components for the optional deployment of Sourcegraph Executors on Kubernetes.

It is expected that all components contained in this directory and any subdirectories are deployed to ensure full functionality and best performance.

The following components will deploy:

• Executor ConfigMap the configurations for the executors.
• Executor Deployment An executor replica with a Docker sidecar to run isolated batch changes and auto-indexing jobs.
• Executor Persistent Volume Claim A headless service for executor metrics access. Executors are not externally accessible.
• Executor Service A headless service for executor metrics access. Executors are not externally accessible.
• [RBAC] The required rules for executors to interact with the Kubernetes API.
  • Executor Role Contains the required rules.
  • Executor Role Binding Binds the rules to the executor service account.
  • Executor Service Account The service account used by executors.