28fc3202a3
- Change namespace from enforce:restricted to warn:restricted to allow operator to run without PodSecurity blocking - Remove runAsUser:0 from operator as it's no longer needed - This allows the Tailscale operator to run with its default configuration
43 lines
953 B
YAML
43 lines
953 B
YAML
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: tailscale-operator
|
|
namespace: tailscale
|
|
spec:
|
|
interval: 1h
|
|
timeout: 15m
|
|
chart:
|
|
spec:
|
|
chart: tailscale-operator
|
|
version: "1.96.x"
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: tailscale
|
|
namespace: tailscale
|
|
interval: 12h
|
|
targetNamespace: tailscale
|
|
install:
|
|
createNamespace: true
|
|
crds: Create
|
|
upgrade:
|
|
crds: CreateReplace
|
|
values:
|
|
operatorConfig:
|
|
tags: [tailnet]
|
|
operatorSecretRef:
|
|
name: tailscale-operator-authkey
|
|
key: authkey
|
|
logFile: "/var/log/tailscale.log"
|
|
waitForLinkLocal: false
|
|
useOAuth: false
|
|
useOIDC: false
|
|
podSecurityContext: {}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
webhook:
|
|
enabled: false
|