module "runners" {
  source                          = "philips-labs/github-runner/aws"
  version                         = "0.40.0"
  create_service_linked_role_spot = true
  aws_region                      = local.aws_region
  vpc_id                          = module.vpc.vpc_id
  subnet_ids                      = module.vpc.private_subnets

  environment = local.environment

  github_app = {
    key_base64     = nonsensitive(OMITTED)
    id             = nonsensitive(OMITTED)
    webhook_secret = nonsensitive(OMITTED)
  }

  # Grab zip files via lambda_download
  runner_binaries_syncer_lambda_zip = "lambdas-download/runner-binaries-syncer.zip"
  runners_lambda_zip                = "lambdas-download/runners.zip"
  webhook_lambda_zip                = "lambdas-download/webhook.zip"

  # Runner setup
  enable_organization_runners = true
  enable_ssm_on_runners       = true
  instance_types              = ["t4g.large", "c6g.large"]
  runner_architecture         = "arm64"
  runner_extra_labels         = "default,aws"
  runner_os                   = "linux"
  runners_maximum_count       = 8
  volume_size                 = 40

  # ephermeral instance rules
  delay_webhook_event             = 0
  enable_job_queued_check         = true
  fifo_build_queue                = false
  job_queue_retention_in_seconds  = 300
  minimum_running_time_in_minutes = 1
  redrive_build_queue = {
    enabled         = true
    maxReceiveCount = 3
  }

  # override scaling down
  scale_down_schedule_expression = "cron(* * * * ? *)"

  tags = {
    Project = "GitHubAction"
  }
}

resource "aws_iam_service_linked_role" "spot" {
  aws_service_name = "spot.amazonaws.com"
}

# Other parts omitted as they are unrelated.