.github/gh-actions-self-hosted-runners/self-hosted-linux/kubernetes/github-actions-deployment.yml

################################################################################
#  Licensed to the Apache Software Foundation (ASF) under one
#  or more contributor license agreements.  See the NOTICE file
#  distributed with this work for additional information
#  regarding copyright ownership.  The ASF licenses this file
#  to you under the Apache License, Version 2.0 (the
#  "License"); you may not use this file except in compliance
#  with the License.  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
#  Unless required by applicable law or agreed to in writing, software
#  distributed under the License is distributed on an "AS IS" BASIS,
#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#  See the License for the specific language governing permissions and
# limitations under the License.
################################################################################
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ubuntu-runners
  labels:
    name: github-actions
spec:
  selector:
    matchLabels:
      name: github-actions
  replicas: 10
  template:
    metadata:
      labels:
        name: github-actions
    spec:
      containers:
        - name: github-actions-ubuntu-runner
          image: $IMAGE_URL:latest # Replace variable manually
          securityContext:
            privileged: true
          envFrom:
            - secretRef:
                name: github-actions-secrets
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /var/secrets/google/key.json
            - name: DOCKER_HOST
              value: tcp://localhost:2376
            - name: DOCKER_TLS_VERIFY
              value: '1'
            - name: DOCKER_CERT_PATH
              value: /certs/client
          volumeMounts:
            - name: gcloud-key
              mountPath: /var/secrets/google
            - name: docker-certs-client
              mountPath: /certs/client
          resources:
            requests:
              memory: "1028Mi"
              cpu: "2"
        - name: dind
          image: docker:20.10.17-dind
          securityContext:
            privileged: true
          volumeMounts:
            - name: dind-storage
              mountPath: /var/lib/docker
            - name: docker-certs-client
              mountPath: /certs/client
      volumes:
        - name: gcloud-key
          secret:
            secretName: $k8s_SECRET_NAME # Replace variable manually
        - name: dind-storage
          emptyDir: {}
        - name: docker-certs-client
          emptyDir: {}