From 8c041be96cd8ce14b77044600f27ab836b488a5e Mon Sep 17 00:00:00 2001
From: Casey Brooks <casey.brooks@agyn.io>
Date: Thu, 14 May 2026 01:05:30 +0000
Subject: [PATCH 1/2] fix: use privileged k8s runner docker

---
 stacks/apps/main.tf     | 2 +-
 stacks/platform/main.tf | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/stacks/apps/main.tf b/stacks/apps/main.tf
index 7ece564..d3bf9d7 100644
--- a/stacks/apps/main.tf
+++ b/stacks/apps/main.tf
@@ -233,7 +233,7 @@ locals {
       {
         name = "CAPABILITY_IMPLEMENTATIONS"
         value = jsonencode({
-          docker = "rootless"
+          docker = "privileged"
         })
       },
       {
diff --git a/stacks/platform/main.tf b/stacks/platform/main.tf
index 0639136..ecbc890 100644
--- a/stacks/platform/main.tf
+++ b/stacks/platform/main.tf
@@ -1482,6 +1482,11 @@ resource "kubernetes_namespace" "platform" {
 resource "kubernetes_namespace_v1" "agyn_workloads" {
   metadata {
     name = "agyn-workloads"
+    labels = {
+      "pod-security.kubernetes.io/enforce" = "privileged"
+      "pod-security.kubernetes.io/audit"   = "privileged"
+      "pod-security.kubernetes.io/warn"    = "privileged"
+    }
   }
 }
 

From 046c0c1d8cd9513d6d664f700510bd8d97d41a92 Mon Sep 17 00:00:00 2001
From: Vitalii Valkov <vitalii@agyn.io>
Date: Thu, 14 May 2026 23:10:44 +0400
Subject: [PATCH 2/2] revert llm proxy

---
 stacks/platform/variables.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/stacks/platform/variables.tf b/stacks/platform/variables.tf
index f216f74..0ea01b7 100644
--- a/stacks/platform/variables.tf
+++ b/stacks/platform/variables.tf
@@ -659,7 +659,7 @@ variable "media_proxy_image_tag" {
 variable "llm_proxy_chart_version" {
   type        = string
   description = "Version of the llm-proxy Helm chart published to GHCR"
-  default     = "0.12.1"
+  default     = "0.12.0"
 }
 
 variable "llm_proxy_image_tag" {