fix(forgejo-runner): cicd ns PSS privileged (dind needs it) + mount homelab-ca as ConfigMap not Secret — runner RS created 0 pods under baseline PSS, then FailedMount because homelab-ca is a ConfigMap trust bundle, not a Secret

2026-08-18 15:08:04 -07:00
parent 6401652aa8
commit b863b6974e
2 changed files with 11 additions and 7 deletions
@@ -104,5 +104,7 @@ spec:
        - name: docker-certs
          emptyDir: {}    # DinD regenerates mTLS certs on each start
        - name: homelab-ca
-          secret:
-            secretName: homelab-ca
+          # homelab-ca is a ConfigMap (public CA trust bundle), not a Secret.
+          # The volumeMounts use subPath: ca.crt to project the single cert file.
+          configMap:
+            name: homelab-ca