From e32e853dd806112e37261aa62deab10c9baa1f00 Mon Sep 17 00:00:00 2001
From: aggarwalakshun <aggarwalakshun@gmail.com>
Date: Sat, 27 Dec 2025 22:20:31 +0530
Subject: [PATCH] add gitea-act manifests

---
 .../ipv6/git-ops/gitea-act/gitea-act-pvc.yml  | 14 ++++
 .../git-ops/gitea-act/gitea-act-secrets.yml   | 15 ++++
 clusters/ipv6/git-ops/gitea-act/gitea-act.yml | 75 +++++++++++++++++++
 3 files changed, 104 insertions(+)
 create mode 100644 clusters/ipv6/git-ops/gitea-act/gitea-act-pvc.yml
 create mode 100644 clusters/ipv6/git-ops/gitea-act/gitea-act-secrets.yml
 create mode 100644 clusters/ipv6/git-ops/gitea-act/gitea-act.yml

diff --git a/clusters/ipv6/git-ops/gitea-act/gitea-act-pvc.yml b/clusters/ipv6/git-ops/gitea-act/gitea-act-pvc.yml
new file mode 100644
index 0000000..bf84649
--- /dev/null
+++ b/clusters/ipv6/git-ops/gitea-act/gitea-act-pvc.yml
@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: gitea-act-runner-longhorn
+  namespace: git-ops
+spec:
+  accessModes:
+    - ReadWriteOnce
+  volumeMode: Filesystem
+  resources:
+    requests:
+      storage: 100Mi
+  storageClassName: longhorn
diff --git a/clusters/ipv6/git-ops/gitea-act/gitea-act-secrets.yml b/clusters/ipv6/git-ops/gitea-act/gitea-act-secrets.yml
new file mode 100644
index 0000000..b493ff4
--- /dev/null
+++ b/clusters/ipv6/git-ops/gitea-act/gitea-act-secrets.yml
@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: gitea-act-runner-secret
+  namespace: git-ops
+spec:
+  encryptedData:
+    TOKEN: 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
+    URL: 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
+  template:
+    metadata:
+      name: gitea-act-runner-secret
+      namespace: git-ops
+    type: Opaque
diff --git a/clusters/ipv6/git-ops/gitea-act/gitea-act.yml b/clusters/ipv6/git-ops/gitea-act/gitea-act.yml
new file mode 100644
index 0000000..2661c42
--- /dev/null
+++ b/clusters/ipv6/git-ops/gitea-act/gitea-act.yml
@@ -0,0 +1,75 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: gitea-act-runner
+  name: gitea-act-runner
+  namespace: git-ops
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: gitea-act-runner
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: gitea-act-runner
+    spec:
+      restartPolicy: Always
+      volumes:
+      - name: docker-certs
+        emptyDir: {}
+      - name: runner-data
+        persistentVolumeClaim:
+          claimName: gitea-act-runner-longhorn
+      containers:
+      - name: runner
+        image: gitea/act_runner@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944
+        command: ["sh", "-c", "while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...'; sleep 5; done; /sbin/tini -- run.sh"]
+        readinessProbe:
+          exec:
+            command:
+            - sh
+            - -c
+            - |
+              nc -z gitea-int-service.git-ops.svc.cluster.local 3000
+          initialDelaySeconds: 5
+          periodSeconds: 5
+          failureThreshold: 3
+        env:
+        - name: DOCKER_HOST
+          value: tcp://localhost:2376
+        - name: DOCKER_CERT_PATH
+          value: /certs/client
+        - name: DOCKER_TLS_VERIFY
+          value: "1"
+        - name: GITEA_INSTANCE_URL
+          valueFrom:
+            secretKeyRef:
+              key: URL
+              name: gitea-act-runner-secret
+        - name: GITEA_RUNNER_REGISTRATION_TOKEN
+          valueFrom:
+            secretKeyRef:
+              key: TOKEN
+              name: gitea-act-runner-secret
+        - name: CONFIG_FILE
+          value: "/data/config.yaml"
+        volumeMounts:
+        - name: docker-certs
+          mountPath: /certs
+        - name: runner-data
+          mountPath: /data
+      - name: daemon
+        image: docker:29.1.3-dind
+        env:
+        - name: DOCKER_TLS_CERTDIR
+          value: /certs
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - name: docker-certs
+          mountPath: /certs