fix: nftables only for owner (#1571)

* fix: nftables only for owner

* typo

---------

Co-authored-by: 0x7fffff92 <0x7fffff92@example.com>
This commit is contained in:
0x7fffff92 2025-07-19 09:25:55 +08:00 committed by GitHub
parent d4a1a44e39
commit f362396514
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -301,7 +301,7 @@ spec:
valueFrom:
fieldRef:
fieldPath: status.hostIP
{{- if or (eq $role "owner") (eq $role "admin") }}
{{- if eq $role "owner" }}
- name: TS_DEBUG_FIREWALL_MODE
value: nftables
{{- end }}
@ -321,7 +321,7 @@ spec:
- name: TS_EXTRA_ARGS
value: >-
--login-server http://headscale-server-svc:8080
--netfilter-mode {{ if or (eq $role "owner") (eq $role "admin") }}on{{ else }}off{{ end }}
--netfilter-mode {{ if eq $role "owner" }}on{{ else }}off{{ end }}
- name: TS_USERSPACE
value: "false"