fix: Increase permissions and resolve mirror cache issues (#1961)

Co-authored-by: 0x7fffff92 <0x7fffff92@example.com>
This commit is contained in:
0x7fffff92 2025-10-21 23:59:36 +08:00 committed by GitHub
parent a176a5dc7a
commit fd08ef8816
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -71,6 +71,29 @@ roleRef:
name: admin
apiGroup: rbac.authorization.k8s.io
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: {{ .Values.bfl.username }}:sysenv-reader
rules:
- apiGroups: ["sys.bytetrade.io"]
resources: ["systemenvs"]
verbs: ["get","list","watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: user:{{ .Values.bfl.username }}:sysenv-reader
subjects:
- kind: ServiceAccount
name: tailscale
namespace: user-space-{{ .Values.bfl.username }}
roleRef:
kind: ClusterRole
name: {{ .Values.bfl.username }}:sysenv-reader
apiGroup: rbac.authorization.k8s.io
---
apiVersion: apps/v1
@ -128,7 +151,7 @@ spec:
- |
chown -R 1000:1000 /headscale
- name: init
image: beclab/headscale-init:v0.1.12
image: beclab/headscale-init:v0.1.13
imagePullPolicy: IfNotPresent
securityContext:
privileged: true