Fix Tailscale operator: set runAsUser/runAsGroup for non-root image
The tailscale/k8s-operator image runs as root by default, conflicting with runAsNonRoot=true. Set runAsUser:65532 (nobody) to satisfy both PodSecurity and container runtime.
This commit is contained in:
parent
2ab4a78825
commit
035ff4d428
1 changed files with 2 additions and 0 deletions
|
|
@ -33,6 +33,8 @@ spec:
|
|||
useOIDC: false
|
||||
podSecurityContext:
|
||||
runAsNonRoot: true
|
||||
runAsUser: 65532
|
||||
runAsGroup: 65532
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
runAsNonRoot: true
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue