apiVersion: actions.github.com/v1alpha1
kind: AutoscalingRunnerSet
metadata:
  name: mealcraft-runners
  namespace: arc-systems
  annotations:
    actions.github.com/cleanup-github-secret-name: mealcraft-runners-gha-rs-github-secret
    actions.github.com/cleanup-manager-role-binding: mealcraft-runners-gha-rs-manager
    actions.github.com/cleanup-manager-role-name: mealcraft-runners-gha-rs-manager
    actions.github.com/cleanup-no-permission-service-account-name: mealcraft-runners-gha-rs-no-permission
    actions.github.com/runner-group-name: Default
    actions.github.com/runner-scale-set-name: mealcraft-runners
    meta.helm.sh/release-name: mealcraft-runners
    meta.helm.sh/release-namespace: arc-systems
  labels:
    actions.github.com/organization: MealCraft
    actions.github.com/scale-set-name: mealcraft-runners
    actions.github.com/scale-set-namespace: arc-systems
    app.kubernetes.io/component: autoscaling-runner-set
    app.kubernetes.io/instance: mealcraft-runners
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: mealcraft-runners
    app.kubernetes.io/part-of: gha-rs
    app.kubernetes.io/version: 0.13.0
    helm.sh/chart: gha-rs-0.13.0

spec:
  githubConfigSecret: mealcraft-runners-gha-rs-github-secret
  githubConfigUrl: https://github.com/MealCraft
  runnerScaleSetName: mealcraft-runners

  template:
    spec:
      restartPolicy: Never
      serviceAccountName: mealcraft-runners-gha-rs-no-permission

      # 👇 HOST STORAGE ACCESS
      volumes:
        - name: k8s-storage
          hostPath:
            path: /home/kimjunte/k8s_storage
            type: Directory

      containers:
        - name: runner
          image: ghcr.io/actions/actions-runner:latest
          command:
            - /home/runner/run.sh

          # 👇 AWS CREDS FROM K8S SECRET
          envFrom:
            - secretRef:
                name: aws-secrets

          # 👇 MOUNT PV STORAGE READ-ONLY
          volumeMounts:
            - name: k8s-storage
              mountPath: /k8s_storage
              readOnly: true