kube-prometheus: Use non-root and Prometheus v2.1.0

This commit is contained in:
Frederic Branczyk
2018-01-19 15:18:53 +01:00
parent f97b6af095
commit 52990f7951
2 changed files with 7 additions and 4 deletions

View File

@@ -10,6 +10,9 @@ spec:
app: kube-state-metrics
spec:
serviceAccountName: kube-state-metrics
securityContext:
runAsNonRoot: true
runAsUser: 65534
containers:
- name: kube-rbac-proxy-main
image: quay.io/brancz/kube-rbac-proxy:v0.2.0
@@ -70,8 +73,8 @@ spec:
- /pod_nanny
- --container=kube-state-metrics
- --cpu=100m
- --extra-cpu=1m
- --memory=100Mi
- --extra-memory=2Mi
- --extra-cpu=2m
- --memory=150Mi
- --extra-memory=30Mi
- --threshold=5
- --deployment=kube-state-metrics

View File

@@ -6,7 +6,7 @@ metadata:
prometheus: k8s
spec:
replicas: 2
version: v2.0.0
version: v2.1.0
serviceAccountName: prometheus-k8s
serviceMonitorSelector:
matchExpressions: