helm-numbat-dind.yml

## githubConfigUrl is the GitHub url for where you want to configure runners
## ex: https://github.com/myorg/myrepo or https://github.com/myorg

# These runners test and attach themselves to this repo
# ** change this to what you really want **
githubConfigUrl: "https://github.com/some-natalie/kubernoodles"

## githubConfigSecret is the k8s secrets to use when auth with GitHub API.
## You can choose to use GitHub App or a PAT token
# githubConfigSecret:
### GitHub Apps Configuration
## NOTE: IDs MUST be strings, use quotes
#   github_app_id: ""
#   github_app_installation_id: ""
#   github_app_private_key: |
#     -----BEGIN RSA PRIVATE KEY-----
#     -----END RSA PRIVATE KEY-----

### GitHub PAT Configuration
# github_token: ""

## maxRunners is the max number of runners the auto scaling runner set will scale up to.
maxRunners: 5

## minRunners is the min number of runners the auto scaling runner set will scale down to.
minRunners: 1

# runnerGroup: "default"

template:
  spec:
    initContainers:
      - name: init-dind-externals
        image: ghcr.io/some-natalie/kubernoodles/rootless-ubuntu-numbat:latest
        imagePullPolicy: Always
        command:
          ["cp", "-r", "-v", "/home/runner/externals/.", "/home/runner/tmpDir/"]
        volumeMounts:
          - name: dind-externals
            mountPath: /home/runner/tmpDir
    containers:
      - name: runner
        image: ghcr.io/some-natalie/kubernoodles/rootless-ubuntu-numbat:latest
        imagePullPolicy: IfNotPresent
        command: ["/home/runner/run.sh"]
        env:
          - name: DOCKER_HOST
            value: tcp://localhost:2376
          - name: DOCKER_TLS_VERIFY
            value: "1"
          - name: DOCKER_CERT_PATH
            value: /certs/client
        volumeMounts:
          - name: work
            mountPath: /home/runner/_work
          - name: dind-cert
            mountPath: /certs/client
            readOnly: true
      - name: dind
        image: docker.io/docker:dind
        imagePullPolicy: IfNotPresent
        securityContext:
          privileged: true
        volumeMounts:
          - name: work
            mountPath: /home/runner/_work
          - name: dind-cert
            mountPath: /certs/client
          - name: dind-externals
            mountPath: /home/runner/externals
    volumes:
      - name: work
        emptyDir: {}
      - name: dind-cert
        emptyDir: {}
      - name: dind-externals
        emptyDir: {}