Fix Tailscale operator: run as root (no longer needs restricted PodSecurity)

The Tailscale operator requires /.config and root-level paths.
Namespace 'tailscale' had its pod-security.kubernetes.io/enforce label
removed, so runAsNonRoot is no longer required.
This commit is contained in:
sirius0xdev 2026-05-04 02:54:27 +00:00
parent 0e60fff9a6
commit fbf3e4a55b

View file

@ -32,12 +32,9 @@ spec:
useOAuth: false
useOIDC: false
podSecurityContext:
runAsNonRoot: true
runAsUser: 65532
runAsGroup: 65532
runAsUser: 0
securityContext:
allowPrivilegeEscalation: false
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
capabilities: