diff --git a/k8s/bootstrap/phase3-forgejo/namespace.yaml b/k8s/bootstrap/phase3-forgejo/namespace.yaml
index bff8401..12eba5c 100644
--- a/k8s/bootstrap/phase3-forgejo/namespace.yaml
+++ b/k8s/bootstrap/phase3-forgejo/namespace.yaml
@@ -3,8 +3,10 @@ kind: Namespace
 metadata:
   name: cicd
   labels:
-    # Baseline allows most workloads while blocking clearly dangerous configurations
-    # Redis needs some relaxed settings but doesn't need full privileged access
-    pod-security.kubernetes.io/enforce: baseline
-    pod-security.kubernetes.io/audit: baseline
-    pod-security.kubernetes.io/warn: baseline
+    # privileged: the forgejo-runner's dind (docker-in-docker) sidecar requires
+    # securityContext.privileged=true, which baseline/restricted PSS reject
+    # (the ReplicaSet silently creates 0 pods). gitea, redis and CNPG here are
+    # already privileged-tolerant.
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/warn: privileged
diff --git a/k8s/infra/forgejo-runner/templates/deployment.yaml b/k8s/infra/forgejo-runner/templates/deployment.yaml
index de33f29..bd5ff27 100644
--- a/k8s/infra/forgejo-runner/templates/deployment.yaml
+++ b/k8s/infra/forgejo-runner/templates/deployment.yaml
@@ -104,5 +104,7 @@ spec:
         - name: docker-certs
           emptyDir: {}    # DinD regenerates mTLS certs on each start
         - name: homelab-ca
-          secret:
-            secretName: homelab-ca
+          # homelab-ca is a ConfigMap (public CA trust bundle), not a Secret.
+          # The volumeMounts use subPath: ca.crt to project the single cert file.
+          configMap:
+            name: homelab-ca