githubConfigUrl: https://github.com/alexcodeplace/ThemeFactory
githubConfigSecret: themefactory-arc-github-config
runnerScaleSetName: themefactory-ci
runnerGroup: default
controllerServiceAccount:
  name: arc-controller-gha-rs-controller
  namespace: arc-systems
minRunners: 0
maxRunners: 3
listenerTemplate:
  spec:
    containers:
      - name: listener
        resources:
          requests:
            cpu: 50m
            memory: 128Mi
          limits:
            cpu: 500m
            memory: 512Mi
template:
  metadata:
    labels:
      app.kubernetes.io/part-of: themefactory
      themefactory.dev/trust-profile: untrusted-static
      themefactory.dev/ephemeral: "true"
  spec:
    automountServiceAccountToken: false
    securityContext:
      runAsNonRoot: true
      runAsUser: 1001
      runAsGroup: 1001
      fsGroup: 1001
      seccompProfile:
        type: RuntimeDefault
    containers:
      - name: runner
        image: ghcr.io/alexcodeplace/themefactory-ci-runner:2026-08-22
        imagePullPolicy: Never
        command: ["/home/runner/run.sh"]
        env:
          - name: THEMEFACTORY_RUNNER_TRUST_PROFILE
            value: untrusted-static
        securityContext:
          allowPrivilegeEscalation: false
          privileged: false
          runAsNonRoot: true
          readOnlyRootFilesystem: false
          capabilities:
            drop: ["ALL"]
        resources:
          requests:
            cpu: 250m
            memory: 512Mi
          limits:
            cpu: "2"
            memory: 4Gi
