apiVersion: v1
kind: ServiceAccount
metadata:
  labels:
    app.kubernetes.io/instance: gitea-runner
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: act-runner
    app.kubernetes.io/version: 0.2.11
    helm.sh/chart: act-runner-0.2.0
  name: gitea-runner-act-runner
  namespace: gitea-runner
---
apiVersion: v1
data:
  config.yaml: |-
    log:
      level: debug
    runner:
      envs:
        DOCKER_HOST: tcp://localhost:2376
        DOCKER_TLS_VERIFY: "1"
      labels:
        - ubuntu-latest:docker://docker.gitea.com/runner-images:ubuntu-latest
        - ubuntu-22.04:docker://docker.gitea.com/runner-images:ubuntu-22.04
        - ubuntu-20.04:docker://docker.gitea.com/runner-images:ubuntu-20.04
        - x64
    container:
      force_pull: false
kind: ConfigMap
metadata:
  annotations:
    checksum/config: 495a480c41c36c98bb5ea9a8382e1f96bc4e8d3a2f7fb5bcdac7f0fb235295b2
  labels:
    app.kubernetes.io/instance: gitea-runner
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: act-runner
    app.kubernetes.io/version: 0.2.11
    helm.sh/chart: act-runner-0.2.0
  name: gitea-runner-act-runner-config
  namespace: gitea-runner
---
apiVersion: apps/v1
kind: StatefulSet
metadata:
  labels:
    app.kubernetes.io/instance: gitea-runner
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: act-runner
    app.kubernetes.io/version: 0.2.11
    helm.sh/chart: act-runner-0.2.0
  name: gitea-runner-act-runner
  namespace: gitea-runner
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/instance: gitea-runner
      app.kubernetes.io/name: act-runner
  template:
    metadata:
      annotations:
        checksum/config: 495a480c41c36c98bb5ea9a8382e1f96bc4e8d3a2f7fb5bcdac7f0fb235295b2
        checksum/secret: 12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126
      labels:
        app.kubernetes.io/instance: gitea-runner
        app.kubernetes.io/name: act-runner
    spec:
      containers:
      - command:
        - sh
        - -c
        - while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...';
          sleep 5; done; /sbin/tini -- run.sh
        env:
        - name: GITEA_INSTANCE_URL
          value: https://git.borninpain.de
        - name: GITEA_RUNNER_REGISTRATION_TOKEN
          valueFrom:
            secretKeyRef:
              key: token
              name: gitea-runner
        - name: CONFIG_FILE
          value: /config/config.yaml
        - name: DOCKER_HOST
          value: tcp://localhost:2376
        - name: DOCKER_CERT_PATH
          value: /certs/client
        - name: DOCKER_TLS_VERIFY
          value: "1"
        image: docker.io/gitea/act_runner:0.2.13
        imagePullPolicy: IfNotPresent
        name: act-runner
        volumeMounts:
        - mountPath: /data
          name: data
        - mountPath: /config
          name: config
        - mountPath: /certs
          name: docker-certs
      - env:
        - name: DOCKER_TLS_CERTDIR
          value: /certs
        image: docker:23.0.6-dind
        imagePullPolicy: IfNotPresent
        name: docker-dind
        securityContext:
          privileged: true
        volumeMounts:
        - mountPath: /certs
          name: docker-certs
      restartPolicy: Always
      securityContext:
        fsGroup: 1000
      serviceAccountName: gitea-runner-act-runner
      terminationGracePeriodSeconds: 10
      volumes:
      - configMap:
          name: gitea-runner-act-runner-config
        name: config
      - emptyDir: {}
        name: docker-certs
  updateStrategy:
    type: RollingUpdate
  volumeClaimTemplates:
  - metadata:
      name: data
    spec:
      accessModes:
      - ReadWriteOnce
      resources:
        requests:
          storage: 1Gi
      storageClassName: openebs-3-replicas