githubConfigUrl: https://github.com/alexcodeplace/ThemeFactory
githubConfigSecret: themefactory-arc-github-config
runnerScaleSetName: themefactory-runtime
runnerGroup: default
controllerServiceAccount:
  name: arc-controller-gha-rs-controller
  namespace: arc-systems
minRunners: 0
maxRunners: 3
listenerTemplate:
  spec:
    containers:
      - name: listener
        resources:
          requests:
            cpu: 50m
            memory: 128Mi
          limits:
            cpu: 500m
            memory: 512Mi
template:
  metadata:
    labels:
      app.kubernetes.io/part-of: themefactory
      themefactory.dev/trust-profile: privileged-runtime
      themefactory.dev/ephemeral: "true"
  spec:
    automountServiceAccountToken: false
    initContainers:
      - name: init-dind-externals
        image: ghcr.io/alexcodeplace/themefactory-ci-runner:2026-08-22
        imagePullPolicy: Never
        command: ["cp"]
        args: ["-r", "/home/runner/externals/.", "/home/runner/tmpDir/"]
        volumeMounts:
          - name: dind-externals
            mountPath: /home/runner/tmpDir
      - name: dind
        image: docker.io/library/docker:29.1.3-dind@sha256:64d6ee47ea821c986467199baa162f5ac8cde3f57b719f18e23f3ed7a7444131
        imagePullPolicy: IfNotPresent
        args:
          - dockerd
          - --host=unix:///var/run/docker.sock
          - --group=$(DOCKER_GROUP_GID)
        env:
          - name: DOCKER_GROUP_GID
            value: "123"
        securityContext:
          privileged: true
        restartPolicy: Always
        startupProbe:
          exec:
            command: ["docker", "info"]
          initialDelaySeconds: 0
          failureThreshold: 24
          periodSeconds: 5
        resources:
          requests:
            cpu: 250m
            memory: 512Mi
            ephemeral-storage: 8Gi
          limits:
            cpu: "2"
            memory: 4Gi
            ephemeral-storage: 20Gi
        volumeMounts:
          - name: work
            mountPath: /home/runner/_work
          - name: dind-sock
            mountPath: /var/run
          - name: dind-externals
            mountPath: /home/runner/externals
    containers:
      - name: runner
        image: ghcr.io/alexcodeplace/themefactory-ci-runner:2026-08-22
        imagePullPolicy: Never
        command: ["/home/runner/run.sh"]
        env:
          - name: THEMEFACTORY_RUNNER_TRUST_PROFILE
            value: privileged-runtime
          - name: DOCKER_HOST
            value: unix:///var/run/docker.sock
          - name: RUNNER_WAIT_FOR_DOCKER_IN_SECONDS
            value: "120"
        securityContext:
          allowPrivilegeEscalation: false
          privileged: false
          runAsNonRoot: true
          runAsUser: 1001
          runAsGroup: 1001
          capabilities:
            drop: ["ALL"]
        resources:
          requests:
            cpu: "1"
            memory: 2Gi
            ephemeral-storage: 2Gi
          limits:
            cpu: "6"
            memory: 12Gi
            ephemeral-storage: 8Gi
        volumeMounts:
          - name: work
            mountPath: /home/runner/_work
          - name: dind-sock
            mountPath: /var/run
    volumes:
      - name: work
        emptyDir: {}
      - name: dind-sock
        emptyDir: {}
      - name: dind-externals
        emptyDir: {}
