apiVersion: v1 kind: Namespace metadata: name: gitea-actions labels: pod-security.kubernetes.io/enforce: privileged --- apiVersion: v1 kind: ConfigMap metadata: name: kata-ephemeral-runner-config namespace: gitea-actions data: config.yaml: | log: level: info runner: file: /runner-state/.runner capacity: 1 envs: DOCKER_HOST: tcp://host.docker.internal:2375 timeout: 3h shutdown_timeout: 5m labels: - kata-poc:docker://docker.io/library/alpine:3.22 cache: enabled: false container: network: "" options: --add-host=host.docker.internal:host-gateway docker_host: tcp://127.0.0.1:2375 require_docker: true docker_timeout: 5m force_pull: true bind_workdir: false