Merge pull request #2427 from philipgough/ci-fix-ksm

ci: Add runAsGroup for kube-state-metrics
2024-05-24 11:32:55 +02:00
parent 01c0e7d130 387731a945
commit 1c54cb22ca
2 changed files with 4 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/kube-state-metrics.libsonnet
+++ b/jsonnet/kube-prometheus/components/kube-state-metrics.libsonnet
@@ -164,6 +164,9 @@ function(params) (import 'github.com/kubernetes/kube-state-metrics/jsonnet/kube-
            ports:: null,
            livenessProbe:: null,
            readinessProbe:: null,
+            securityContext+: {
+              runAsGroup: 65534,
+            },
            args: ['--host=127.0.0.1', '--port=8081', '--telemetry-host=127.0.0.1', '--telemetry-port=8082'],
            resources: ksm._config.resources,
          }, super.containers) + [kubeRbacProxyMain, kubeRbacProxySelf],