From bfaba89985c26b30e135c2e165bfa4c82da8c72e Mon Sep 17 00:00:00 2001
From: felegy <felegy@hvg.hu>
Date: Wed, 3 Sep 2025 12:27:41 +0000
Subject: [PATCH] + ADD Build environment

---
 .devops/build/1-runner-role.yaml         | 11 ++++
 .devops/build/2-runner-role-binding.yaml | 11 ++++
 .devops/build/3-act-runner-vol.yaml      | 10 ++++
 .devops/build/4-act-runner.yaml          | 75 ++++++++++++++++++++++++
 .devops/gitea-values.yaml                | 17 ++++++
 5 files changed, 124 insertions(+)
 create mode 100644 .devops/build/1-runner-role.yaml
 create mode 100644 .devops/build/2-runner-role-binding.yaml
 create mode 100644 .devops/build/3-act-runner-vol.yaml
 create mode 100644 .devops/build/4-act-runner.yaml
 create mode 100644 .devops/gitea-values.yaml

diff --git a/.devops/build/1-runner-role.yaml b/.devops/build/1-runner-role.yaml
new file mode 100644
index 0000000..1f2c158
--- /dev/null
+++ b/.devops/build/1-runner-role.yaml
@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: runner-role
+rules:
+- apiGroups:
+  - '*'
+  resources:
+  - '*'
+  verbs:
+  - '*'
diff --git a/.devops/build/2-runner-role-binding.yaml b/.devops/build/2-runner-role-binding.yaml
new file mode 100644
index 0000000..10edd6e
--- /dev/null
+++ b/.devops/build/2-runner-role-binding.yaml
@@ -0,0 +1,11 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: runner-role-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: runner-role
+subjects:
+- kind: ServiceAccount
+  name: default
diff --git a/.devops/build/3-act-runner-vol.yaml b/.devops/build/3-act-runner-vol.yaml
new file mode 100644
index 0000000..3d2d8e7
--- /dev/null
+++ b/.devops/build/3-act-runner-vol.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: act-runner-vol
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
diff --git a/.devops/build/4-act-runner.yaml b/.devops/build/4-act-runner.yaml
new file mode 100644
index 0000000..8afb653
--- /dev/null
+++ b/.devops/build/4-act-runner.yaml
@@ -0,0 +1,75 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: act-runner
+  labels:
+    app: act-runner
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app: act-runner
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: act-runner
+    spec:
+      containers:
+      - command:
+        - sh
+        - -c
+        - while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...';
+          sleep 5; done; /sbin/tini -- run.sh
+        env:
+        - name: DOCKER_HOST
+          value: tcp://localhost:2376
+        - name: DOCKER_CERT_PATH
+          value: /certs/client
+        - name: DOCKER_TLS_VERIFY
+          value: "1"
+        - name: GITEA_INSTANCE_URL
+          value: http://gitea-http.gitea.svc.cluster.local:3000
+        - name: GITEA_RUNNER_REGISTRATION_TOKEN
+          valueFrom:
+            secretKeyRef:
+              key: token
+              name: runner-secret
+        image: gitea/act_runner:nightly
+        imagePullPolicy: IfNotPresent
+        name: runner
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /certs
+          name: docker-certs
+        - mountPath: /data
+          name: runner-data
+      - env:
+        - name: DOCKER_TLS_CERTDIR
+          value: /certs
+        image: docker:23.0.6-dind
+        imagePullPolicy: IfNotPresent
+        name: daemon
+        securityContext:
+          privileged: true
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /certs
+          name: docker-certs
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: docker-certs
+      - name: runner-data
+        persistentVolumeClaim:
+          claimName: act-runner-vol
diff --git a/.devops/gitea-values.yaml b/.devops/gitea-values.yaml
new file mode 100644
index 0000000..a98198b
--- /dev/null
+++ b/.devops/gitea-values.yaml
@@ -0,0 +1,17 @@
+    fullnameOverride: gitea
+    ingress:
+      enabled: 'false'
+      className: nginx
+      annotations:
+        nginx.ingress.kubernetes.io/ssl-redirect: "true"
+        cert-manager.io/cluster-issuer: cloudflare-cluster-issuer
+        external-dns.alpha.kubernetes.io/hostname: git.hvgrt.hu
+      hosts:
+      - host: git.hvgrt.hu
+        paths:
+          - path: /
+            pathType: Prefix
+      tls:
+      - secretName: gitea-tls
+        hosts:
+        - git.hvgrt.hu