apiVersion: apps/v1
kind: Deployment
metadata:
  name: forgejo-runner
  namespace: forgejo
spec:
  selector:
    matchLabels:
      app: forgejo-runner
  template:
    metadata:
      labels:
        app: forgejo-runner
    spec:
      containers:
      - name: runner
        image: forgejo.libretalk.eu/jad0s/forgejo-runner:latest
        command:
          - sh
          - -c
          - |
            forgejo-runner register \
              --no-interactive \
              --instance ${FORGEJO_INSTANCE_URL} \
              --token ${FORGEJO_RUNNER_REGISTRATION_TOKEN} \
              --name ${FORGEJO_RUNNER_NAME} \
              --labels docker:docker://forgejo.libretalk.eu/jad0s/ci-runner:latest && \
            sleep 5 && \
            forgejo-runner daemon
        env:
        - name: FORGEJO_INSTANCE_URL
          value: "http://forgejo.forgejo.svc.cluster.local:3000"
        - name: FORGEJO_RUNNER_REGISTRATION_TOKEN
          valueFrom:
            secretKeyRef:
              name: forgejo-runner-token
              key: token
        - name: FORGEJO_RUNNER_NAME
          value: "k3s-runner"
        - name: DOCKER_HOST
          value: tcp://localhost:2375
        - name: DOCKER_TLS_CERTDIR
          value: ""
        volumeMounts:
        - name: dind-storage
          mountPath: /var/lib/docker
      - name: dind
        image: docker:dind
        securityContext:
          privileged: true
        env:
        - name: DOCKER_TLS_CERTDIR
          value: ""
        volumeMounts:
        - name: dind-storage
          mountPath: /var/lib/docker
      volumes:
      - name: dind-storage
        emptyDir: {}