Allow privileged on gitlab runners

Pythoner6 · Feb 3, 2024 · f3ac6a4 · f3ac6a4
1 parent 7c1c399
commit f3ac6a4
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/k8s/gitlab/gitlab.cue b/k8s/gitlab/gitlab.cue
@@ -29,7 +29,14 @@ let nodeAffinity = {
 kustomizations: $default: #dependsOn: [dcsi.kustomizations.helm, cnpg.kustomizations.helm, rook.kustomizations.cluster]
 kustomizations: $default: manifest: {
   ns: #AppNamespace
-  runnerNs: c8s.#Namespace & {#name: "gitlab-runners"}
+  runnerNs: c8s.#Namespace & {
+    #name: "gitlab-runners"
+    metadata: labels: {
+      "pod-security.kubernetes.io/enforce": "privileged"
+      "pod-security.kubernetes.io/audit": "privileged"
+      "pod-security.kubernetes.io/warn": "privileged"
+    }
+  }
   "gitlab-db": clusters.#Cluster & {
     spec: {
       instances: 3
@@ -245,6 +252,7 @@ kustomizations: helm: manifest: {
               [runners.kubernetes]
                 namespace = "\(kustomizations.$default.manifest.runnerNs.metadata.name)"
                 image = "alpine"
+                privileged = true
               [runners.kubernetes.node_selector]
                 "kubernetes.io/arch" = "amd64"
                 "kubernetes.io/os" = "linux"