easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #2422 from philipgough/ci-fix

Browse Source 
ci: Add runAsGroup for blackbox exporter containers
This commit is contained in:
Kemal Akkoyun
2024-05-13 11:33:53 +02:00
committed by GitHub
parent 2a07e4579e d1ec0ab362
commit 2147ea0079
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
jsonnet/kube-prometheus/components/blackbox-exporter.libsonnet
View File

@@ -183,6 +183,7 @@ function(params) {
} else { } else {
runAsNonRoot: true, runAsNonRoot: true,
runAsUser: 65534, runAsUser: 65534,
runAsGroup: 65534,
allowPrivilegeEscalation: false, allowPrivilegeEscalation: false,
readOnlyRootFilesystem: true, readOnlyRootFilesystem: true,
capabilities: { drop: ['ALL'] }, capabilities: { drop: ['ALL'] },
@@ -205,6 +206,7 @@ function(params) {
securityContext: { securityContext: {
runAsNonRoot: true, runAsNonRoot: true,
runAsUser: 65534, runAsUser: 65534,
runAsGroup: 65534,
allowPrivilegeEscalation: false, allowPrivilegeEscalation: false,
readOnlyRootFilesystem: true, readOnlyRootFilesystem: true,
capabilities: { drop: ['ALL'] }, capabilities: { drop: ['ALL'] },

2
manifests/blackboxExporter-deployment.yaml
View File

@@ -48,6 +48,7 @@ spec:
drop: drop:
- ALL - ALL
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
runAsGroup: 65534
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65534 runAsUser: 65534
volumeMounts: volumeMounts:
@@ -72,6 +73,7 @@ spec:
drop: drop:
- ALL - ALL
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
runAsGroup: 65534
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65534 runAsUser: 65534
terminationMessagePath: /dev/termination-log terminationMessagePath: /dev/termination-log