Fix Tailscale operator: run as root (no longer needs restricted PodSecurity)
The Tailscale operator requires /.config and root-level paths. Namespace 'tailscale' had its pod-security.kubernetes.io/enforce label removed, so runAsNonRoot is no longer required.
This commit is contained in:
parent
0e60fff9a6
commit
fbf3e4a55b
1 changed files with 1 additions and 4 deletions
|
|
@ -32,12 +32,9 @@ spec:
|
|||
useOAuth: false
|
||||
useOIDC: false
|
||||
podSecurityContext:
|
||||
runAsNonRoot: true
|
||||
runAsUser: 65532
|
||||
runAsGroup: 65532
|
||||
runAsUser: 0
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
runAsNonRoot: true
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
capabilities:
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue