With containerMode.type: dind , the gha-runner-scale-set chart of

actions-runner-controller (ARC) adds a Docker daemon to every runner pod.

The chart fixes that container's image as docker:dind , which the kubelet

pulls from Docker Hub, and the current release, 0.15.0 from 1 October 2026,

has no value to change it. This post replaces the image on the rendered

manifests, first with Kustomize over helm template , then with

Kapitan 's mutate

generator , for a pull-through mirror and for a

registry inside an air-gapped network.

Each patch was rendered from the 0.15.0 chart with Helm 4.3.1, Kustomize

5.8.3, and Kapitan 0.36.3 with mutate 0.1.0, and applied to a kind cluster

on Kubernetes 1.37.0.…