image: repository: tccr.io/truecharts/zerotier pullPolicy: IfNotPresent tag: v1.8.10@sha256:8139d7cbeea8a8d2329f1afef0a65674153087cf5bb50890580049654ebe3067 securityContext: readOnlyRootFilesystem: false runAsNonRoot: false capabilities: add: - NET_ADMIN podSecurityContext: runAsUser: 0 runAsGroup: 0 secretEnv: ZEROTIER_API_SECRET: "" ZEROTIER_IDENTITY_PUBLIC: "" ZEROTIER_IDENTITY_SECRET: "" service: main: ports: main: protocol: UDP targetPort: 9993 port: 10190 persistence: config: enabled: true mountPath: "/var/lib/zerotier-one" tun: enabled: true type: hostPath hostPath: /dev/net/tun mountPath: /dev/net/tun hostPathType: "" readOnly: false