From d41ff0c29fecaa9406c5bbf9c78a3744dc761ae8 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Fri, 17 Oct 2025 22:38:11 +1100
Subject: [PATCH] feat: allow access to runner certs

- allow access to runner certs, used for mtls auth to incus
---
 hieradata/roles/infra/git/runner.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hieradata/roles/infra/git/runner.yaml b/hieradata/roles/infra/git/runner.yaml
index 851c6df..4a48b39 100644
--- a/hieradata/roles/infra/git/runner.yaml
+++ b/hieradata/roles/infra/git/runner.yaml
@@ -39,7 +39,8 @@ profiles::gitea::runner::config:
     privileged: false
     options:
     workdir_parent: /workspace
-    valid_volumes: []
+    valid_volumes:
+      - /etc/pki/tls/vault
     docker_host: ""
     force_pull: true
     force_rebuild: false