From 3047b6274cce4e0c142f5c4af55fd2f8e6d53fbe Mon Sep 17 00:00:00 2001
From: Irbe Krumina <irbe@tailscale.com>
Date: Thu, 7 Mar 2024 13:56:11 +0000
Subject: [PATCH] docs/k8s: don't run subnet router in userspace mode (#11363)

There should not be a need to do that unless we run on host network

Signed-off-by: Irbe Krumina <irbe@tailscale.com>
---
 docs/k8s/subnet.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docs/k8s/subnet.yaml b/docs/k8s/subnet.yaml
index e4b9b0969..458840a5b 100644
--- a/docs/k8s/subnet.yaml
+++ b/docs/k8s/subnet.yaml
@@ -17,7 +17,9 @@ spec:
     - name: TS_KUBE_SECRET
       value: "{{TS_KUBE_SECRET}}"
     - name: TS_USERSPACE
-      value: "true"
+      value: "false"
+    - name: TS_DEBUG_FIREWALL_MODE
+      value: auto
     - name: TS_AUTHKEY
       valueFrom:
         secretKeyRef: