# Gitea Actions runner — host mode + Kaniko (no docker.sock; k3s uses containerd)
apiVersion: v1
kind: Secret
metadata:
  name: gitea-act-runner-token
  namespace: gitea
type: Opaque
stringData:
  token: "nL63VkZEyqpCNFdF3AMM9wzQLdLlATUvXSe5Tj0R"
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: gitea-act-runner
  namespace: gitea
spec:
  replicas: 1
  selector:
    matchLabels:
      app: gitea-act-runner
  template:
    metadata:
      labels:
        app: gitea-act-runner
    spec:
      imagePullSecrets:
        - name: registry-pull-secret
      initContainers:
        - name: kaniko-bin
          image: registry.abrban.com/abrban/kaniko-executor:v1.23.2
          imagePullPolicy: IfNotPresent
          command: ["sh", "-c", "cp /kaniko/executor /kaniko-bin/executor && chmod +x /kaniko-bin/executor"]
          volumeMounts:
            - name: kaniko-bin
              mountPath: /kaniko-bin
      containers:
        - name: runner
          image: registry.abrban.com/abrban/act-runner:0.2.11
          imagePullPolicy: IfNotPresent
          env:
            - name: GITEA_INSTANCE_URL
              value: https://git.abrban.com
            - name: GITEA_RUNNER_REGISTRATION_TOKEN
              valueFrom:
                secretKeyRef:
                  name: gitea-act-runner-token
                  key: token
            - name: GITEA_RUNNER_NAME
              value: k8s-abr-runner
            - name: GITEA_RUNNER_LABELS
              value: abrban-kaniko:host
          volumeMounts:
            - name: kaniko-bin
              mountPath: /kaniko
      volumes:
        - name: kaniko-bin
          emptyDir: {}