image: repository: tccr.io/truecharts/zerotier pullPolicy: IfNotPresent tag: v1.8.9@sha256:02f5c42cf3798921fc87d2efea491bd48676cba892a6b7ed0c3423cf206ebe8b securityContext: readOnlyRootFilesystem: false runAsNonRoot: false capabilities: add: - NET_ADMIN podSecurityContext: runAsUser: 0 runAsGroup: 0 secret: ZEROTIER_API_SECRET: "" ZEROTIER_IDENTITY_PUBLIC: "" ZEROTIER_IDENTITY_SECRET: "" service: main: ports: main: protocol: UDP targetPort: 9993 port: 10190 persistence: config: enabled: true mountPath: "/var/lib/zerotier-one" tun: enabled: true type: hostPath hostPath: /dev/net/tun mountPath: /dev/net/tun hostPathType: "" readOnly: false