Merge pull request #2428 from philipgough/ci-fix-prom

ci: Add runAsGroup for prom operator Deployment
2024-05-24 11:32:41 +02:00
parent c523c26a33 e8f461ba38
commit 01c0e7d130
2 changed files with 4 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
+++ b/jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
@@ -163,6 +163,9 @@ function(params)
        template+: {
          spec+: {
            automountServiceAccountToken: true,
+            securityContext+: {
+              runAsGroup: 65534,
+            },
            containers+: [kubeRbacProxy],
          },
        },
--- a/manifests/prometheusOperator-deployment.yaml
+++ b/manifests/prometheusOperator-deployment.yaml
@@ -81,6 +81,7 @@ spec:
      nodeSelector:
        kubernetes.io/os: linux
      securityContext:
+        runAsGroup: 65534
        runAsNonRoot: true
        runAsUser: 65534
        seccompProfile: