HOMELAB-319: fix(runner): disable DinD TLS + add namespace PodSecurity #48

Merged
claude-agent merged 1 commit from plane/HOMELAB-319-forgejo-runner-k8s into live 2026-03-24 00:16:02 +00:00
Owner
No description provided.
HOMELAB-319: fix(runner): disable DinD TLS + add namespace PodSecurity
Some checks failed
Plan failed.
CI Review / pr-title (pull_request) Has been cancelled
CI Review / helm-validate (pull_request) Has been cancelled
CI Review / ai-review (pull_request) Has been cancelled
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Lint & Validate / shellcheck (pull_request) Has been cancelled
f081558629
- Disable TLS for DinD sidecar (same-pod localhost, no security benefit)
- Remove docker-certs volume entirely (eliminates cert race condition)
- Add namespace.yaml with privileged PodSecurity labels
- Use tcp://localhost:2375 (non-TLS) standard CI pattern

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Collaborator

Plan Error

creating new workspace: mkdir /atlantis-data/repos/aaron/infra-core/48: read-only file system
**Plan Error** ``` creating new workspace: mkdir /atlantis-data/repos/aaron/infra-core/48: read-only file system ```
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!48
No description provided.