diff --git a/gitlab-system/gitlab-runner/gitlab-runner.yaml b/gitlab-system/gitlab-runner/gitlab-runner.yaml
index c562d69..ce508f9 100644
--- a/gitlab-system/gitlab-runner/gitlab-runner.yaml
+++ b/gitlab-system/gitlab-runner/gitlab-runner.yaml
@@ -33,9 +33,24 @@
 
       runtimeClassName: kata
 
+      initContainers:
+        - name: init
+          image: docker.io/library/busybox:latest
+
+          command:
+            - sh
+            - -c
+            - cp -v /conf/gitlab-runner/* /etc/gitlab-runner/
+
+          volumeMounts:
+            - name: config-ro
+              mountPath: /conf/gitlab-runner
+            - name: config-rw
+              mountPath: /etc/gitlab-runner
+
       containers:
         - name: master
-          image: docker.benkard.de/mulk/gitlab-runner:miyj7qdmgdbbqk7zkj3wdq0ld9zxdk2z
+          image: docker.benkard.de/mulk/gitlab-runner:8n39akh45p1js8xbky9l0kjwqdyj3c33
 
           securityContext:
             # In a Kata container, this only gives the container full
@@ -47,7 +62,7 @@
 
           volumeMounts:
             # Configuration data.
-            - name: config
+            - name: config-rw
               mountPath: /etc/gitlab-runner
 
             # State.
@@ -57,13 +72,17 @@
               mountPath: /tmp
 
           resources:
+            requests:
+              memory: 128Mi
             limits:
-              memory: 4G
+              memory: 8Gi
 
       volumes:
-        - name: config
+        - name: config-ro
           secret:
             secretName: gitlab-runner-config
+        - name: config-rw
+          emptyDir: {}
         - name: docker-data
           persistentVolumeClaim:
             claimName: gitlab-runner-docker