image: repository: docker.io/zerotier/zerotier pullPolicy: IfNotPresent tag: 1.14.0@sha256:0819d39738e837efdf00f2baa1639b6c8663e0a4828648d557fcd7a7176e3392 service: main: ports: main: protocol: udp targetPort: 9993 port: 10190 persistence: config: enabled: true mountPath: "/var/lib/zerotier-one" tun: enabled: true type: hostPath hostPath: /dev/net/tun mountPath: /dev/net/tun hostPathType: "" readOnly: false portal: open: enabled: false securityContext: container: readOnlyRootFilesystem: false runAsNonRoot: false capabilities: add: - NET_ADMIN runAsUser: 0 runAsGroup: 0 workload: main: podSpec: containers: main: probes: liveness: enabled: false readiness: enabled: false startup: enabled: false env: ZEROTIER_API_SECRET: "" ZEROTIER_IDENTITY_PUBLIC: "" ZEROTIER_IDENTITY_SECRET: ""