TheArchive/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2024-11-29 04:55:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs/k8s: fix subnet router manifests (#12305)

Browse Source 
In https://github.com/tailscale/tailscale/pull/11363
I changed the subnet router manifest to run in tun
mode (for performance reasons), but did not
change the security context to give it net_admin,
which is required to for the tailscale socket.

Updates tailscale/tailscale#12083

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
This commit is contained in:
Irbe Krumina 2024-05-31 19:15:02 +01:00 committed by GitHub
parent f227083539
commit 1ec0273473
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/k8s/subnet.yaml
View File

@ -29,5 +29,6 @@ spec:
- name: TS_ROUTES - name: TS_ROUTES
value: "{{TS_ROUTES}}" value: "{{TS_ROUTES}}"
securityContext: securityContext:
runAsUser: 1000 capabilities:
runAsGroup: 1000 add:
- NET_ADMIN