This is frustratingly necessary

Signed-off-by: Martyn Ranyard <m@rtyn.berlin>

apps-kustomized/torrents/deploy.yaml

@@ -15,15 +15,15 @@ spec:
         app: qbittorrent
     spec:
       initContainers:
-      - image: ghcr.io/tailscale/tailscale:latest
+      - image: ghcr.io/tailscale/tailscale:v1.80.3
         command:
         - /bin/sh
         - -c
         - mkdir -p /persist/var/lib/tailscale; touch /run/xtables.lock
         name: ts-prep
         securityContext:
-          runAsGroup: 1000
+          runAsGroup: 0
-          runAsUser: 1000
+          runAsUser: 0
           privileged: true
         volumeMounts:
         - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
@@ -82,11 +82,11 @@ spec:
 #            - 100.100.100.100
 #          initialDelaySeconds: 120
 #          periodSeconds: 5
-        image: ghcr.io/tailscale/tailscale:latest
+        image: ghcr.io/tailscale/tailscale:v1.80.3
         name: ts-sidecar
         securityContext:
-          runAsGroup: 1000
+          runAsGroup: 0
-          runAsUser: 1000
+          runAsUser: 0
           privileged: true
         volumeMounts:
         - mountPath: /var/run/secrets/kubernetes.io/serviceaccount