See related documentation:

    [[gitlab.enhanced.runner]]
    # A Gitlab runner token provided during registration.
    # See https://doc.cedarci.com/config/gitlab-runner/.
    token = ""
    
    # A Gitlab access token with read_api scope attached to the same entity as the
    # runner. The token is needed to fetch metadata used for intelligent caching.
    # See https://doc.cedarci.com/config/gitlab-api/.
    api_token = ""
    
    # --------------------------------------------------------------------
    # Optional: defaults inlined.
    
    # The number of CPU cores or partial cores, ranging between 0.25 and 16.
    # Values may also be given in milicpu (ex. 1500m = 1.5).
    cpu = "2"
    
    # The amount of memory to make available, ratio expected to be 4 times cpu.
    # Values may be given with SI prefixes (ex. 1.5G = 1500M, 1.5Gi = 1536Mi).
    memory = "8Gi"
    
    # Limit the number of jobs that can run at the same time.
    # For cost buckets see https://doc.cedarci.com/financial/pricing/#enhanced.
    concurrent = 16
    
    # The URL of Gitlab instance to poll for jobs.
    url = "https://gitlab.com"
    
    # The default job image if not specified in .gitlab-ci.yml definition.
    image = "ruby:3.1"
    
    # The fallback job timeout, in seconds, used to clear jobs.
    # Increase if your pipelines contain jobs that run for more than an hour.
    timeout = 3600
    
    # Default resources for the helper container.
    # Increase if having problems due to a large git repository or large Gitlab artifacts.
    helper_cpu = "100m"
    helper_memory = "400Mi"
    
    # Default resources for service containers.
    service_cpu = "500m"
    service_memory = "2Gi"
    
    # Intelligent cache settings.
    # See https://doc.cedarci.com/config/intelligent-cache/.
    
    # Expand search to include fork project fork.
    # Allows forks to benefit from source project cache.
    expand_fork = true
    # Expand search to include protected branches.
    # Allows non-protected branches to benefit from protected branch caches.
    expand_protected = true
    
    # Partition by project, otherwise all projects are considered a single cache.
    partition_project = true
    # Partition protected branches.
    partition_protected = true
    
    
    # Restrict the images allowed for jobs.
    # By default, any image is allowed which is equivalent to ["*/*:*"]. For
    # example, restrict to a single registry with: ["registry.example.com/*:*"].
    allowed_images = []
    
    # Restrict the images allowed for services.
    # Uses the same default and format as `allowed_images`.
    allowed_services = []