# Exceptional profile. Do not route ordinary AgentRuns or untrusted/fork jobs here.
githubConfigUrl: https://github.com/platform-modules
githubConfigSecret: awp-arc-github-app
runnerScaleSetName: awp-privileged-build
runnerGroup: default
minRunners: 0
maxRunners: 2
containerMode:
  type: dind
template:
  metadata:
    labels:
      awp.dev/trust-profile: privileged-build
      awp.dev/ephemeral: "true"
  spec:
    automountServiceAccountToken: false
    containers:
      - name: runner
        env:
          - name: AWP_RUNNER_TRUST_PROFILE
            value: privileged-build
        resources:
          requests:
            cpu: "1"
            memory: 2Gi
          limits:
            cpu: "6"
            memory: 12Gi
