resource "helm_release" "drone_runner" {
  name             = "runner"
  chart            = "drone-runner-kube"
  repository       = "https://charts.drone.io"
  namespace        = kubernetes_namespace.server.metadata.0.name
  create_namespace = false

  values = [jsonencode({
    rbac = {
      buildNamespaces = [
        kubernetes_namespace.jobs.metadata.0.name
      ]
    }
    }),
    jsonencode({
      env = {
        DRONE_SERVER_HOST = "https://${local.ingress_domain}"
        DRONE_RPC_HOST    = "${helm_release.drone_server.name}.${helm_release.drone_server.namespace}.svc.cluster.local"
        DRONE_RPC_PROTO   = "http"
        DRONE_NAMESPACE_DEFAULT = kubernetes_namespace.jobs.metadata.0.name
      }
    }),
    jsonencode({
      ingress = {
        enabled = false
      }
    })
  ]
  set_sensitive {
    name  = "env.DRONE_RPC_SECRET"
    value = random_password.drone_rpc_secret.result
  }
}