sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix Tailscale operator: run as root (no longer needs restricted PodSecurity)

Browse source 
The Tailscale operator requires /.config and root-level paths.
Namespace 'tailscale' had its pod-security.kubernetes.io/enforce label
removed, so runAsNonRoot is no longer required.
This commit is contained in:
sirius0xdev 2026-05-04 02:54:27 +00:00
parent 0e60fff9a6
commit fbf3e4a55b
1 changed files with 1 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
infrastructure/controllers/base/tailscale/release-operator.yaml
View file

@ -32,12 +32,9 @@ spec:
useOAuth: false useOAuth: false
useOIDC: false useOIDC: false
podSecurityContext: podSecurityContext:
runAsNonRoot: true runAsUser: 0
runAsUser: 65532
runAsGroup: 65532
securityContext: securityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
runAsNonRoot: true
seccompProfile: seccompProfile:
type: RuntimeDefault type: RuntimeDefault
capabilities: capabilities: