From 9340c66e37d6ce25b3c88f18afd2f95ed332ec82 Mon Sep 17 00:00:00 2001
From: Shahab Dogar <shahab@dogar.dev>
Date: Mon, 16 Sep 2024 13:22:05 +0500
Subject: [PATCH] feat: adjust ROOT_URL in gitea and create action runner

---
 1password/secrets.yaml        | 10 ++++++
 gitea/actions/runner.yaml     | 63 +++++++++++++++++++++++++++++++++++
 helm/values/gitea.values.yaml |  1 +
 3 files changed, 74 insertions(+)
 create mode 100644 gitea/actions/runner.yaml

diff --git a/1password/secrets.yaml b/1password/secrets.yaml
index ea1c5a0..b3ab9a6 100644
--- a/1password/secrets.yaml
+++ b/1password/secrets.yaml
@@ -38,3 +38,13 @@ metadata:
     operator.1password.io/auto-restart: "true"
 spec:
   itemPath: "vaults/Lab/items/Postgres"
+---
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: runner-secret
+  namespace: gitea-system
+  annotations:
+    operator.1password.io/auto-restart: "true"
+spec:
+  itemPath: "vaults/Lab/items/Gitea"
diff --git a/gitea/actions/runner.yaml b/gitea/actions/runner.yaml
new file mode 100644
index 0000000..07c89c0
--- /dev/null
+++ b/gitea/actions/runner.yaml
@@ -0,0 +1,63 @@
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: action-runner
+  namespace: gitea-system
+spec:
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 10Gi
+  storageClassName: longhorn
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: action-runner
+  name: action-runner
+  namespace: gitea-system
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: action-runner
+  strategy: {}
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: action-runner
+    spec:
+      restartPolicy: Always
+      volumes:
+      - name: runner-data
+        persistentVolumeClaim:
+          claimName: action-runner
+      securityContext:
+        fsGroup: 1000
+      containers:
+      - name: runner
+        image: gitea/act_runner:nightly-dind-rootless
+        imagePullPolicy: Always
+        # command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; /sbin/tini -- /opt/act/run.sh"]
+        env:
+        - name: DOCKER_HOST
+          value: tcp://localhost:2376
+        - name: DOCKER_CERT_PATH
+          value: /certs/client
+        - name: DOCKER_TLS_VERIFY
+          value: "1"
+        - name: GITEA_INSTANCE_URL
+          value: http://gitea-http.gitea-system.svc.cluster.local:3000
+        - name: GITEA_RUNNER_REGISTRATION_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: runner-secret
+              key: runner-token
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - name: runner-data
+          mountPath: /data
diff --git a/helm/values/gitea.values.yaml b/helm/values/gitea.values.yaml
index c251102..c10bd9c 100644
--- a/helm/values/gitea.values.yaml
+++ b/helm/values/gitea.values.yaml
@@ -40,6 +40,7 @@ gitea:
       ENABLE_PPROF: true
       ENABLE_GZIP: true
       LFS_START_SERVER: true
+      ROOT_URL: https://git.dogar.dev
     database:
       DB_TYPE: postgres
       HOST: postgres-cluster-rw.postgres-system.svc.cluster.local:5432