init: copy from lawndale-infra

runner.tf

@@ -0,0 +1,32 @@
+resource "helm_release" "drone_runner" {
+  name             = "runner"
+  chart            = "drone-runner-kube"
+  repository       = "https://charts.drone.io"
+  namespace        = kubernetes_namespace.server.metadata.0.name
+  create_namespace = false
+
+  values = [jsonencode({
+    rbac = {
+      buildNamespaces = [
+        kubernetes_namespace.jobs.metadata.0.name
+      ]
+    }
+    }),
+    jsonencode({
+      env = {
+        DRONE_SERVER_HOST = "https://${local.ingress_domain}"
+        DRONE_RPC_HOST    = "${helm_release.drone_server.name}.${helm_release.drone_server.namespace}.svc.cluster.local"
+        DRONE_RPC_PROTO   = "http"
+      }
+    }),
+    jsonencode({
+      ingress = {
+        enabled = false
+      }
+    })
+  ]
+  set_sensitive {
+    name  = "env.DRONE_RPC_SECRET"
+    value = random_password.drone_rpc_secret.result
+  }
+}