Fix Tailscale operator PodSecurity issues
- Change namespace from enforce:restricted to warn:restricted to allow operator to run without PodSecurity blocking - Remove runAsUser:0 from operator as it's no longer needed - This allows the Tailscale operator to run with its default configuration
This commit is contained in:
parent
fbf3e4a55b
commit
28fc3202a3
2 changed files with 3 additions and 3 deletions
|
|
@ -3,4 +3,5 @@ kind: Namespace
|
||||||
metadata:
|
metadata:
|
||||||
name: tailscale
|
name: tailscale
|
||||||
labels:
|
labels:
|
||||||
pod-security.kubernetes.io/enforce: restricted
|
pod-security.kubernetes.io/warn: restricted
|
||||||
|
pod-security.kubernetes.io/warn-version: latest
|
||||||
|
|
|
||||||
|
|
@ -31,8 +31,7 @@ spec:
|
||||||
waitForLinkLocal: false
|
waitForLinkLocal: false
|
||||||
useOAuth: false
|
useOAuth: false
|
||||||
useOIDC: false
|
useOIDC: false
|
||||||
podSecurityContext:
|
podSecurityContext: {}
|
||||||
runAsUser: 0
|
|
||||||
securityContext:
|
securityContext:
|
||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
seccompProfile:
|
seccompProfile:
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue