apiVersion: keda.sh/v1alpha1
kind: ScaledJob
metadata:
  labels:
    app: forgejo-runner
  name: forgejo-runner
  namespace: runners
spec:
  jobTargetRef:
    template:
      metadata:
        labels:
          app: forgejo-runner
      spec:
        restartPolicy: Never
        shareProcessNamespace: true
        volumes:
        - name: runner-config
          configMap:
            name: runner-config
        - name: runner-data
          emptyDir: {}  # ephemeral, writable storage
        - name: docker-graph-storage
          emptyDir: {}
        - name: docker-certs
          emptyDir: {}
        initContainers:
        - name: copy-config
          image: code.forgejo.org/forgejo/runner:6.3.1
          command: ["sh", "-c", "cp /config/.runner /data/"]
          volumeMounts:
          - name: runner-config
            mountPath: /config
          - name: runner-data
            mountPath: /data
        containers:
        - name: runner
          image: code.forgejo.org/forgejo/runner:6.3.1
          command:
          - "sh"
          - "-c"
          - |
            trap 'pkill -SIGINT dockerd' EXIT

            while ! nc -z localhost 2376; do
              echo "Waiting for TCP port 2376..."
              sleep 1
            done

            echo "Port 2376 is open!"
            forgejo-runner one-job
          env:
          - name: DOCKER_HOST
            value: "tcp://localhost:2376"
          - name: DOCKER_TLS_VERIFY
            value: "1"
          - name: DOCKER_CERT_PATH
            value: /certs/client
          securityContext: # for "pkill -SIGINT dockerd", docker:dind-rootless do not need this, however this fails for me during container creation
            runAsUser: 0
            runAsGroup: 0
          volumeMounts:
          - name: runner-data
            mountPath: /data
          - name: docker-certs
            mountPath: /certs/client
        - name: docker
          image: docker:dind
          securityContext:
            privileged: true
          volumeMounts:
            - name: docker-graph-storage
              mountPath: /var/lib/docker
            - name: docker-certs
              mountPath: /certs/client
  minReplicaCount: 0
  maxReplicaCount: 20
  pollingInterval: 30
  triggers:
  - type: forgejo-runner
    metadata:
      name: "forgejo-runner-ubuntu"
      token: "6866a82995c4509b77669100a8e8dba70f7f4151"
      address: "http://x.x.x.x:3000/"
      global: "true" ## optional
      owner: "" ## optional
      repo: "" ## optional
      labels: "ubuntu-latest"