kube-prometheus: Use non-root and Prometheus v2.1.0
This commit is contained in:
@@ -10,6 +10,9 @@ spec:
|
|||||||
app: kube-state-metrics
|
app: kube-state-metrics
|
||||||
spec:
|
spec:
|
||||||
serviceAccountName: kube-state-metrics
|
serviceAccountName: kube-state-metrics
|
||||||
|
securityContext:
|
||||||
|
runAsNonRoot: true
|
||||||
|
runAsUser: 65534
|
||||||
containers:
|
containers:
|
||||||
- name: kube-rbac-proxy-main
|
- name: kube-rbac-proxy-main
|
||||||
image: quay.io/brancz/kube-rbac-proxy:v0.2.0
|
image: quay.io/brancz/kube-rbac-proxy:v0.2.0
|
||||||
@@ -70,8 +73,8 @@ spec:
|
|||||||
- /pod_nanny
|
- /pod_nanny
|
||||||
- --container=kube-state-metrics
|
- --container=kube-state-metrics
|
||||||
- --cpu=100m
|
- --cpu=100m
|
||||||
- --extra-cpu=1m
|
- --extra-cpu=2m
|
||||||
- --memory=100Mi
|
- --memory=150Mi
|
||||||
- --extra-memory=2Mi
|
- --extra-memory=30Mi
|
||||||
- --threshold=5
|
- --threshold=5
|
||||||
- --deployment=kube-state-metrics
|
- --deployment=kube-state-metrics
|
||||||
|
@@ -6,7 +6,7 @@ metadata:
|
|||||||
prometheus: k8s
|
prometheus: k8s
|
||||||
spec:
|
spec:
|
||||||
replicas: 2
|
replicas: 2
|
||||||
version: v2.0.0
|
version: v2.1.0
|
||||||
serviceAccountName: prometheus-k8s
|
serviceAccountName: prometheus-k8s
|
||||||
serviceMonitorSelector:
|
serviceMonitorSelector:
|
||||||
matchExpressions:
|
matchExpressions:
|
||||||
|
Reference in New Issue
Block a user