apiVersion: actions.summerwind.dev/v1alpha1
kind: RunnerDeployment
metadata:
  name: cicd-sample-runners
  namespace: actions-runner-system
spec:
  replicas: 1
  template:
    spec:
      dockerdContainerResources: {}
      image: ""
      imagePullPolicy: IfNotPresent
      repository: tidbcloud/cicd-sample
      nodeSelector:
        cloud.google.com/gke-spot: "true"
        # cicd/action-runner-resource: "true"
      resources:
        limits:
          cpu: 1
          memory: 1Gi
        requests:
          cpu: 200m
          memory: 1Gi
      env:
      - name: AWS_WEB_IDENTITY_TOKEN_FILE
        value: /identity/token
      - name: AZURE_FEDERATED_TOKEN_FILE
        value: /var/run/secrets/azure/tokens/azure-identity-token
      volumeMounts:
      - name: identity
        mountPath: /identity
      - name: azure-identity-token
        mountPath: /var/run/secrets/azure/tokens
      volumes:
      - emptyDir: {}
        name: identity
      - emptyDir: {}
        name: azure-identity-token
      sidecarContainers:
      - env:
        - name: AWS_WEB_IDENTITY_TOKEN_FILE
          value: /identity/token
        - name: AZURE_FEDERATED_TOKEN_FILE
          value: /var/run/secrets/azure/tokens/azure-identity-token
        image: gcr.io/pingcap-dbaas-build/cicd/actions-runner/gcp-web-identity:20240902-gcp
        imagePullPolicy: Always
        resources: {}
        name: auth
        volumeMounts:
        - mountPath: /identity
          name: identity
        - mountPath: /var/run/secrets/azure/tokens
          name: azure-identity-token
      labels:
        - test
