sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix Tailscale operator: set runAsUser/runAsGroup for non-root image

Browse source 
The tailscale/k8s-operator image runs as root by default, conflicting
with runAsNonRoot=true. Set runAsUser:65532 (nobody) to satisfy both
PodSecurity and container runtime.
This commit is contained in:
sirius0xdev 2026-05-04 02:36:59 +00:00
parent 2ab4a78825
commit 035ff4d428
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
infrastructure/controllers/base/tailscale/release-operator.yaml
View file

@ -33,6 +33,8 @@ spec:
useOIDC: false useOIDC: false
podSecurityContext: podSecurityContext:
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65532
runAsGroup: 65532
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
runAsNonRoot: true runAsNonRoot: true