apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: act-runner
  name: act-runner
spec:
  replicas: 1
  selector:
    matchLabels:
      app: act-runner
  strategy: {}
  template:
    metadata:
      labels:
        app: act-runner
    spec:
      restartPolicy: Always
      volumes:
        - name: runner-data-nfs
          persistentVolumeClaim:
            claimName: runner-data-nfs
      securityContext:
        fsGroup: 1000
      containers:
        - name: runner
          image: vegardit/gitea-act-runner:dind-latest
          imagePullPolicy: Always
          # command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; /sbin/tini -- /opt/act/run.sh"]
          env:
            - name: GITEA_RUNNER_JOB_CONTAINER_PRIVILEGED
              value: "true"
            - name: GITEA_RUNNER_JOB_CONTAINER_NETWORK
              value: "host"
            - name: GITEA_INSTANCE_URL
              value: http://gitea-service:80
            - name: GITEA_RUNNER_REGISTRATION_TOKEN
              valueFrom:
                secretKeyRef:
                  name: runner-secret
                  key: token
          securityContext:
            privileged: true
          volumeMounts:
            - name: runner-data-nfs
              mountPath: /data