easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #2428 from philipgough/ci-fix-prom

Browse Source 
ci: Add runAsGroup for prom operator Deployment
This commit is contained in:
Kemal Akkoyun
2024-05-24 11:32:41 +02:00
committed by GitHub
parent c523c26a33 e8f461ba38
commit 01c0e7d130
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
View File

@@ -163,6 +163,9 @@ function(params)
template+: { template+: {
spec+: { spec+: {
automountServiceAccountToken: true, automountServiceAccountToken: true,
securityContext+: {
runAsGroup: 65534,
},
containers+: [kubeRbacProxy], containers+: [kubeRbacProxy],
}, },
}, },

1
manifests/prometheusOperator-deployment.yaml
View File

@@ -81,6 +81,7 @@ spec:
nodeSelector: nodeSelector:
kubernetes.io/os: linux kubernetes.io/os: linux
securityContext: securityContext:
runAsGroup: 65534
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65534 runAsUser: 65534
seccompProfile: seccompProfile: