apiVersion: apps/v1
kind: Deployment
metadata:
  name: gitea-runner
  namespace: ci
  labels:
    app: gitea-runner
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gitea-runner
  template:
    metadata:
      labels:
        app: gitea-runner
    spec:
      securityContext:
        runAsUser: 1000
        runAsGroup: 1000
      initContainers:
        - name: register
          image: gitea/act_runner:latest
          workingDir: /data
          command: ["/bin/sh", "-c"]
          args:
            - |
              act_runner register \
                --instance "$GITEA_INSTANCE_URL" \
                --token "$GITEA_RUNNER_REGISTRATION_TOKEN" \
                --name legion \
                --labels "self-hosted,linux,x64,legion" \
                --no-interactive
              cat > /data/config.yaml << 'EOF'
              runner:
                capacity: 2
                timeout: 3h
              host:
                workdir_parent: /data/workspace
              EOF
          env:
            - name: HOME
              value: /home/will
          envFrom:
            - secretRef:
                name: gitea-runner-secret
          volumeMounts:
            - name: data
              mountPath: /data
      containers:
        - name: runner
          image: gitea/act_runner:latest
          workingDir: /data
          command: ["act_runner", "daemon", "--config", "/data/config.yaml"]
          env:
            - name: HOME
              value: /home/will
            - name: PATH
              value: /home/will/.local/bin:/usr/local/bin:/usr/bin:/bin
          envFrom:
            - secretRef:
                name: gitea-runner-secret
          volumeMounts:
            - name: data
              mountPath: /data
            - name: docker-sock
              mountPath: /var/run/docker.sock
            - name: usr-local-bin
              mountPath: /usr/local/bin
              readOnly: true
            - name: usr-bin
              mountPath: /usr/bin
              readOnly: true
            - name: usr-local-lib
              mountPath: /usr/local/lib
              readOnly: true
            - name: usr-lib-python3
              mountPath: /usr/lib/python3
              readOnly: true
            - name: usr-lib-python312
              mountPath: /usr/lib/python3.12
              readOnly: true
            - name: home-will-local
              mountPath: /home/will/.local
              readOnly: true
          resources:
            requests:
              memory: 512Mi
              cpu: 250m
            limits:
              memory: 4Gi
              cpu: "4"
      volumes:
        - name: data
          emptyDir: {}
        - name: docker-sock
          hostPath:
            path: /var/run/docker.sock
            type: Socket
        - name: usr-local-bin
          hostPath:
            path: /usr/local/bin
        - name: usr-bin
          hostPath:
            path: /usr/bin
        - name: usr-local-lib
          hostPath:
            path: /usr/local/lib
        - name: usr-lib-python3
          hostPath:
            path: /usr/lib/python3
        - name: usr-lib-python312
          hostPath:
            path: /usr/lib/python3.12
        - name: home-will-local
          hostPath:
            path: /home/will/.local