Encrypt k8s secrets with Forgejo action key

Allow mounting all volumes in Forgejo actions
2024-05-01 23:38:45 +02:00 · 2024-05-01 23:38:45 +02:00 · a7d403eb5b
commit a7d403eb5b
parent 4b6a072a5c
2 changed files with 15 additions and 6 deletions
--- a/kubenix-modules/forgejo/runner-config.nix
+++ b/kubenix-modules/forgejo/runner-config.nix
@ -27,7 +27,7 @@
    privileged = false;
    options = "";
    workdir_parent = "";
-    valid_volumes = [ "/var/run/secrets/kubernetes.io/serviceaccount" ];
+    valid_volumes = [ "**" ];
    docker_host = "";
    force_pull = false;
  };