forgejo: runner rootless dind (v2.4)

jaredallard · jaredallard · commit f02971780b25 · 2025-03-09T13:51:38.000-07:00
diff --git a/manifests/apps/by-cluster/rgst/forgejo.jsonnet b/manifests/apps/by-cluster/rgst/forgejo.jsonnet
@@ -149,6 +149,10 @@ local all = {
           labels: {
             app: $.runner.spec.selector.matchLabels.app,
           },
+          annotations: {
+            'container.apparmor.security.beta.kubernetes.io/buildkitd': 'unconfined',
+            'container.seccomp.security.alpha.kubernetes.io/buildkitd': 'unconfined',
+          },
         },
         spec: {
           nodeSelector: {
