From 0e4a56638c9efe10c5834966605d486348819f40 Mon Sep 17 00:00:00 2001
From: Irbe Krumina <irbe@tailscale.com>
Date: Fri, 22 Dec 2023 10:54:58 +0000
Subject: [PATCH] cmd/k8s-operator: ensure that operator can write to config
 dir

Updates tailscale/tailscale#10638

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
---
 cmd/k8s-operator/operator.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/cmd/k8s-operator/operator.go b/cmd/k8s-operator/operator.go
index d762acd9a..01cbdf8b0 100644
--- a/cmd/k8s-operator/operator.go
+++ b/cmd/k8s-operator/operator.go
@@ -127,9 +127,14 @@ func initTSNet(zlog *zap.SugaredLogger) (*tsnet.Server, *tailscale.Client) {
 	tsClient := tailscale.NewClient("-", nil)
 	tsClient.HTTPClient = credentials.Client(context.Background())
 
+	configDir, err := os.MkdirTemp(os.TempDir(), "tsnet-config")
+	if err != nil {
+		startlog.Fatalf("error creating config directory for tsnet: %v", err)
+	}
 	s := &tsnet.Server{
 		Hostname: hostname,
 		Logf:     zlog.Named("tailscaled").Debugf,
+		Dir:      configDir,
 	}
 	if kubeSecret != "" {
 		st, err := kubestore.New(logger.Discard, kubeSecret)