statefulset:
  extraVolumes:
    - name: docker-socket
      emptyDir: {}
  actRunner:
    extraEnvs:
      - name: DOCKER_HOST
        value: unix:///var/run/docker.sock
      - name: DOCKER_BUILDKIT
        value: "1"
    extraVolumeMounts:
      - name: docker-socket
        mountPath: /var/run
    config: |
      log:
        level: info
      cache:
        enabled: false
      runner:
        labels:
          - "artemis"
          - "ubuntu-latest:docker://docker.gitea.com/runner-images:ubuntu-latest"
          - "ubuntu-22.04:docker://docker.gitea.com/runner-images:ubuntu-22.04"
          - "ubuntu-20.04:docker://docker.gitea.com/runner-images:ubuntu-20.04"
      container:
        privileged: true
        require_docker: true
        docker_timeout: 300s
  dind:
    repository: docker
    tag: 28.3.3-dind
    pullPolicy: IfNotPresent
    extraEnvs:
      - name: DOCKER_TLS_CERTDIR
        value: ""     # disable TLS
      # - name: DOCKER_IPTABLES_LEGACY
      #   value: "1"
    extraVolumeMounts:
      - name: docker-socket
        mountPath: /var/run