From c0fbef2afa5db81d168b331573d69e06b1a76e36 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Beatrice=20Dellac=C3=A0?= <hello@beatrice.wtf>
Date: Wed, 26 Mar 2025 17:41:14 +0100
Subject: [PATCH] update drone

---
 deploy/drone/drone-rbac.yaml                  | 40 +++++++++++++++++++
 deploy/drone/drone-runner-arm64.yaml          | 37 -----------------
 ...ne-runner-amd64.yaml => drone-runner.yaml} | 17 +++-----
 deploy/drone/kustomization.yaml               |  4 +-
 4 files changed, 47 insertions(+), 51 deletions(-)
 create mode 100644 deploy/drone/drone-rbac.yaml
 delete mode 100644 deploy/drone/drone-runner-arm64.yaml
 rename deploy/drone/{drone-runner-amd64.yaml => drone-runner.yaml} (64%)

diff --git a/deploy/drone/drone-rbac.yaml b/deploy/drone/drone-rbac.yaml
new file mode 100644
index 0000000..7b9f0ad
--- /dev/null
+++ b/deploy/drone/drone-rbac.yaml
@@ -0,0 +1,40 @@
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  namespace: default
+  name: drone
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  verbs:
+  - create
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - pods/log
+  verbs:
+  - get
+  - create
+  - delete
+  - list
+  - watch
+  - update
+
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: drone
+  namespace: default
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: default
+roleRef:
+  kind: Role
+  name: drone
+  apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/deploy/drone/drone-runner-arm64.yaml b/deploy/drone/drone-runner-arm64.yaml
deleted file mode 100644
index 90810b4..0000000
--- a/deploy/drone/drone-runner-arm64.yaml
+++ /dev/null
@@ -1,37 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: drone-runner-arm64
-  namespace: drone
-spec:
-  replicas: 2  # adjust replica count as needed
-  selector:
-    matchLabels:
-      app: drone-runner-arm64
-  template:
-    metadata:
-      labels:
-        app: drone-runner-arm64
-    spec:
-      # Ensure pods are scheduled only on ARM64 nodes
-      nodeSelector:
-        kubernetes.io/arch: "arm64"
-      containers:
-        - name: drone-runner-arm64
-          image: drone/drone-runner-kube:latest
-          imagePullPolicy: Always
-          env:
-            - name: DRONE_RPC_HOST
-              value: "drone.beatrice.wtf"
-            - name: DRONE_RPC_PROTO
-              value: "https"
-            - name: DRONE_RPC_SECRET
-              value: "26a2221fd8090ea38720fc445eca6a45a39a63fcce3ba30712e7153b855f8"
-            - name: DRONE_RUNNER_CAPACITY
-              value: "3"
-            - name: DRONE_RUNNER_PLATFORM_OS
-              value: "linux"
-            - name: DRONE_RUNNER_PLATFORM_ARCH
-              value: "arm64"
-            - name: DRONE_DEBUG
-              value: "true"
\ No newline at end of file
diff --git a/deploy/drone/drone-runner-amd64.yaml b/deploy/drone/drone-runner.yaml
similarity index 64%
rename from deploy/drone/drone-runner-amd64.yaml
rename to deploy/drone/drone-runner.yaml
index a57d0b5..7d7ba68 100644
--- a/deploy/drone/drone-runner-amd64.yaml
+++ b/deploy/drone/drone-runner.yaml
@@ -1,22 +1,19 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: drone-runner-amd64
+  name: drone-runner
   namespace: drone
 spec:
-  replicas: 2
+  replicas: 5
   selector:
     matchLabels:
-      app: drone-runner-amd64
+      app: drone-runner
   template:
     metadata:
       labels:
-        app: drone-runner-amd64
-    spec:
-      nodeSelector:
-        kubernetes.io/arch: "amd64"
+        app: drone-runner
       containers:
-        - name: drone-runner-amd64
+        - name: drone-runner
           image: drone/drone-runner-kube:latest
           imagePullPolicy: Always
           env:
@@ -28,9 +25,5 @@ spec:
               value: "26a2221fd8090ea38720fc445eca6a45a39a63fcce3ba30712e7153b855f8"
             - name: DRONE_RUNNER_CAPACITY
               value: "3"
-            - name: DRONE_RUNNER_PLATFORM_OS
-              value: "linux"
-            - name: DRONE_RUNNER_PLATFORM_ARCH
-              value: "amd64"
             - name: DRONE_DEBUG
               value: "true"
\ No newline at end of file
diff --git a/deploy/drone/kustomization.yaml b/deploy/drone/kustomization.yaml
index 3c946ee..5c85362 100644
--- a/deploy/drone/kustomization.yaml
+++ b/deploy/drone/kustomization.yaml
@@ -1,6 +1,6 @@
 resources:
+  - drone-rbac.yaml
   - drone-server.yaml
-  - drone-runner-amd64.yaml
-  - drone-runner-arm64.yaml
+  - drone-runner.yaml
   - drone-ingress.yaml
   - drone-pvc.yaml