diff --git a/charts/actions-runner-controller/values.yaml b/charts/actions-runner-controller/values.yaml index f0540b09..0ce81128 100644 --- a/charts/actions-runner-controller/values.yaml +++ b/charts/actions-runner-controller/values.yaml @@ -72,6 +72,7 @@ runner: enabled: false rbac: + {} # # This allows ARC to dynamically create a ServiceAccount and a Role for each Runner pod that uses "kubernetes" container mode, # # by extending ARC's manager role to have the same permissions required by the pod runs the runner agent in "kubernetes" container mode. # # Without this, Kubernetes blocks ARC to create the role to prevent a priviledge escalation.