Fix Tailscale operator: set runAsUser/runAsGroup for non-root image

The tailscale/k8s-operator image runs as root by default, conflicting
with runAsNonRoot=true. Set runAsUser:65532 (nobody) to satisfy both
PodSecurity and container runtime.
This commit is contained in:
sirius0xdev 2026-05-04 02:36:59 +00:00
parent 2ab4a78825
commit 035ff4d428

View file

@ -33,6 +33,8 @@ spec:
useOIDC: false
podSecurityContext:
runAsNonRoot: true
runAsUser: 65532
runAsGroup: 65532
securityContext:
allowPrivilegeEscalation: false
runAsNonRoot: true