# GitHub Actions Self-Hosted Runner — org-level, serves all repos
# Deployment managed by Argo CD — see servers/legion/apps/github-runner.yaml

resource "kubernetes_secret" "github_runner_secret" {
  metadata {
    name      = "github-runner-secret"
    namespace = kubernetes_namespace.ci.metadata[0].name
  }
  data = {
    ACCESS_TOKEN = var.github_classic_pat
  }
}