From a959e90f4056bd4bc57221ce4ab72a6c2eb8e91b Mon Sep 17 00:00:00 2001
From: JJGadgets <git@jjgadgets.tech>
Date: Thu, 9 Feb 2023 20:05:33 +0800
Subject: [PATCH] feat(zerotier): add zero-ui & zerotier controller

Signed-off-by: JJGadgets <git@jjgadgets.tech>
---
 kube/5-apps/zerotier/1-namespace.yaml  | 7 +++++++
 kube/5-apps/zerotier/4-controller.yaml | 8 ++++----
 2 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/kube/5-apps/zerotier/1-namespace.yaml b/kube/5-apps/zerotier/1-namespace.yaml
index 5086011e..b261277b 100644
--- a/kube/5-apps/zerotier/1-namespace.yaml
+++ b/kube/5-apps/zerotier/1-namespace.yaml
@@ -3,3 +3,10 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: zerotier
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/enforce-version: v1.26
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/audit-version: v1.26
+    pod-security.kubernetes.io/warn: privileged
+    pod-security.kubernetes.io/warn-version: v1.26
diff --git a/kube/5-apps/zerotier/4-controller.yaml b/kube/5-apps/zerotier/4-controller.yaml
index 664787b5..7396681d 100644
--- a/kube/5-apps/zerotier/4-controller.yaml
+++ b/kube/5-apps/zerotier/4-controller.yaml
@@ -39,8 +39,8 @@ spec:
             options:
                 - name: ndots
                   value: "1"
-        securityContext:
-            privileged: true
+        # securityContext:
+        #     privileged: true
         hostNetwork: true
         service:
             main:
@@ -83,8 +83,8 @@ sops:
             UkM0WGxFNVlsQ2J6ZEkwaE0zK3FybTQKgfMnTou0TApYFiECmXVg7PVOQst2m6B1
             4tvRYJL7lOztp+Cs4hWqMxrBnWtYTxRkuiGTAW5MK3Zmu4I2A2wDmQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-02-09T09:55:04Z"
-    mac: ENC[AES256_GCM,data:sYaUOK8NkKBc9xLT0XQ4ncBXcvoLyvHxFsE5uJNKtZP14+RC2sfxkON8IF+2PxoiZnUi39e1Bat1AnRImDVIJoroROZuasU+FK+xvOBHT4dXlTEhY6H8vWM6/a5M7ShtUISDkjsg2gTVgTfl4dG7dzPTvpBcvWpH2HB+LHqYh7I=,iv:Zf/5VHpE/lMXKDi9pYzwe+9VvZhL66LUGrKAFcotFJY=,tag:VK0ZrTOhYt+DI3zBY3Xciw==,type:str]
+    lastmodified: "2023-02-09T12:04:15Z"
+    mac: ENC[AES256_GCM,data:lT6dalGZUi3xCZh2t5L8smE+5m+oeCPIeG0XinTpITJkiHWJxHWMSynxHRC6ugzuKJxxPhZ4HmBdti2mdBY3OhLia/72NKjhqcvc1nRsSVRtiUKiUW/WygLRZgRwM9NiO42EqFi8R7AtF2HhYHF7aUm2tjDNHLy3XF2A3frtGFc=,iv:pQ5yLIf2guepkWrbXSb/y7xsBljD9Tmycnw5jabHMQc=,tag:5RtVB2j7ORNgpmDKd2p+DA==,type:str]
     pgp:
         - created_at: "2023-02-09T03:25:06Z"
           enc: |