Merge pull request #803 from paulfantom/kube-rbac-proxy-uid

Fix kube rbac proxy UID and GID
2020-11-26 14:09:29 +01:00
parent 1c11c1b092 20fa80fb4c
commit 41a973d0cf
5 changed files with 21 additions and 4 deletions
--- a/manifests/kube-state-metrics-deployment.yaml
+++ b/manifests/kube-state-metrics-deployment.yaml
@@ -36,7 +36,9 @@ spec:
        - containerPort: 8443
          name: https-main
        securityContext:
-          runAsUser: 65534
+          runAsGroup: 65532
+          runAsNonRoot: true
+          runAsUser: 65532
      - args:
        - --logtostderr
        - --secure-listen-address=:9443
@@ -48,7 +50,9 @@ spec:
        - containerPort: 9443
          name: https-self
        securityContext:
-          runAsUser: 65534
+          runAsGroup: 65532
+          runAsNonRoot: true
+          runAsUser: 65532
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: kube-state-metrics
--- a/manifests/node-exporter-daemonset.yaml
+++ b/manifests/node-exporter-daemonset.yaml
@@ -70,6 +70,10 @@ spec:
          requests:
            cpu: 10m
            memory: 20Mi
+        securityContext:
+          runAsGroup: 65532
+          runAsNonRoot: true
+          runAsUser: 65532
      hostNetwork: true
      hostPID: true
      nodeSelector:
--- a/manifests/setup/prometheus-operator-deployment.yaml
+++ b/manifests/setup/prometheus-operator-deployment.yaml
@@ -50,7 +50,9 @@ spec:
        - containerPort: 8443
          name: https
        securityContext:
-          runAsUser: 65534
+          runAsGroup: 65532
+          runAsNonRoot: true
+          runAsUser: 65532
      nodeSelector:
        beta.kubernetes.io/os: linux
      securityContext: