Fix Tailscale operator PodSecurity issues
- Change namespace from enforce:restricted to warn:restricted to allow operator to run without PodSecurity blocking - Remove runAsUser:0 from operator as it's no longer needed - This allows the Tailscale operator to run with its default configuration
This commit is contained in:
parent
fbf3e4a55b
commit
28fc3202a3
2 changed files with 3 additions and 3 deletions
|
|
@ -3,4 +3,5 @@ kind: Namespace
|
|||
metadata:
|
||||
name: tailscale
|
||||
labels:
|
||||
pod-security.kubernetes.io/enforce: restricted
|
||||
pod-security.kubernetes.io/warn: restricted
|
||||
pod-security.kubernetes.io/warn-version: latest
|
||||
|
|
|
|||
|
|
@ -31,8 +31,7 @@ spec:
|
|||
waitForLinkLocal: false
|
||||
useOAuth: false
|
||||
useOIDC: false
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
podSecurityContext: {}
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
seccompProfile:
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue