---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: act-runner-amd64
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: act-runner
      app.kubernetes.io/instance: amd64
  replicas: 1
  template:
    metadata:
      labels:
        app.kubernetes.io/name: act-runner
        app.kubernetes.io/instance: amd64
    spec:
      restartPolicy: Always
      # Initialise our configuration file using offline registration
      # https://forgejo.org/docs/v1.21/admin/actions/#offline-registration
      initContainers:
        - name: runner-register
          image: act_runner
          command: ["forgejo-runner"]
          args:
            - "register"
            - "--no-interactive"
            - "--token"
            - $(RUNNER_SECRET)
            - "--name"
            - $(RUNNER_NAME)
            - "--instance"
            - $(FORGEJO_INSTANCE_URL)
            - "--labels"
            - "docker:docker://code.icb4dc0.de/infrastructure/images/act_runtime:amd64,ubuntu-latest-amd64:docker://code.icb4dc0.de/infrastructure/images/act_runtime:amd64,ubuntu-22.04-amd64:docker://code.icb4dc0.de/infrastructure/images/act_runtime:amd64,ubuntu-20.04-amd64:docker://code.icb4dc0.de/infrastructure/images/act_runtime:20.04-amd64"
          env:
            - name: RUNNER_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: RUNNER_SECRET
              valueFrom:
                secretKeyRef:
                  name: forgejo-runner-secret
                  key: token
            - name: FORGEJO_INSTANCE_URL
              value: http://forgejo-http.forgejo.svc.cluster.local:3000
          resources:
            limits:
              cpu: "0.50"
              memory: "64Mi"
          volumeMounts:
            - name: runner-data
              mountPath: /data
      containers:
        - name: runner
          image: act_runner
          imagePullPolicy: Always
          command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; forgejo-runner daemon --config /etc/act/config.yaml"]
          env:
          - name: DOCKER_HOST
            value: tcp://localhost:2376
          - name: DOCKER_CERT_PATH
            value: /certs/client
          - name: DOCKER_TLS_VERIFY
            value: "1"
          volumeMounts:
            - name: runner-data
              mountPath: /data
            - name: docker-certs
              mountPath: /certs
            - name: runner-config
              mountPath: /etc/act
          securityContext:
            privileged: true
        - name: daemon
          image: docker:23.0.6-dind
          env:
          - name: DOCKER_TLS_CERTDIR
            value: /certs
          securityContext:
            privileged: true
          volumeMounts:
          - name: docker-certs
            mountPath: /certs
          - name: runner-data
            mountPath: /data
      securityContext:
        fsGroup: 1000
      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
              - matchExpressions:
                  - key: kubernetes.io/arch
                    operator: In
                    values:
                      - amd64
      volumes:
        - name: runner-data
          emptyDir:
            sizeLimit: 500Mi
        - name: docker-certs
          emptyDir:
            sizeLimit: 5Mi
        - name: runner-config
          configMap:
            name: act-runner-config-amd64