diff --git a/infrastructure/controllers/base/tailscale/namespace.yaml b/infrastructure/controllers/base/tailscale/namespace.yaml index 0049a09..9f240f9 100644 --- a/infrastructure/controllers/base/tailscale/namespace.yaml +++ b/infrastructure/controllers/base/tailscale/namespace.yaml @@ -3,4 +3,5 @@ kind: Namespace metadata: name: tailscale labels: - pod-security.kubernetes.io/enforce: restricted + pod-security.kubernetes.io/warn: restricted + pod-security.kubernetes.io/warn-version: latest diff --git a/infrastructure/controllers/base/tailscale/release-operator.yaml b/infrastructure/controllers/base/tailscale/release-operator.yaml index 1f68ce0..2c35c44 100644 --- a/infrastructure/controllers/base/tailscale/release-operator.yaml +++ b/infrastructure/controllers/base/tailscale/release-operator.yaml @@ -31,8 +31,7 @@ spec: waitForLinkLocal: false useOAuth: false useOIDC: false - podSecurityContext: - runAsUser: 0 + podSecurityContext: {} securityContext: allowPrivilegeEscalation: false seccompProfile: