From 6af7352c32010812b3718c4e76d59a4c166f2b4a Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@tobru.ch>
Date: Tue, 24 Aug 2021 21:37:22 +0200
Subject: [PATCH] install drone runner

---
 drone/drone.yaml  |  4 ---
 drone/runner.yaml | 73 +++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 73 insertions(+), 4 deletions(-)
 create mode 100644 drone/runner.yaml

diff --git a/drone/drone.yaml b/drone/drone.yaml
index 00766e0..9ccffb7 100644
--- a/drone/drone.yaml
+++ b/drone/drone.yaml
@@ -23,10 +23,6 @@ spec:
     spec:
       containers:
       - env:
-        - name: DRONE_KUBERNETES_ENABLED
-          value: "true"
-        - name: DRONE_KUBERNETES_NAMESPACE
-          value: drone
         - name: DRONE_SERVER_HOST
           value: drone.tbrnt.ch
         - name: DRONE_SERVER_PROTO
diff --git a/drone/runner.yaml b/drone/runner.yaml
new file mode 100644
index 0000000..23b098d
--- /dev/null
+++ b/drone/runner.yaml
@@ -0,0 +1,73 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  namespace: drone
+  name: drone-runner
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - create
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - pods/log
+  verbs:
+  - get
+  - create
+  - delete
+  - list
+  - watch
+  - update
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: drone-runner
+  namespace: drone
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: drone
+roleRef:
+  kind: Role
+  name: drone-runner
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: drone-runner
+  labels:
+    app.kubernetes.io/name: drone-runner
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: drone-runner
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: drone-runner
+    spec:
+      containers:
+      - name: runner
+        image: drone/drone-runner-kube:1.0.0-beta.9
+        ports:
+        - containerPort: 3000
+        env:
+        - name: DRONE_RPC_HOST
+          value: drone.tbrnt.ch
+        - name: DRONE_RPC_PROTO
+          value: https
+        - name: DRONE_NAMESPACE_DEFAULT
+          value: drone
+        - name: DRONE_RUNNER_NAME
+          value: knurrli
+        envFrom:
+        - secretRef:
+            name: drone