diff --git a/jsonnet/kube-prometheus/components/alertmanager.libsonnet b/jsonnet/kube-prometheus/components/alertmanager.libsonnet index 364b1a35..1faf0609 100644 --- a/jsonnet/kube-prometheus/components/alertmanager.libsonnet +++ b/jsonnet/kube-prometheus/components/alertmanager.libsonnet @@ -60,6 +60,7 @@ local defaults = { ], }, replicas: 3, + secrets: [], mixin:: { ruleLabels: {}, _config: { @@ -225,6 +226,7 @@ function(params) { }, resources: am._config.resources, nodeSelector: { 'kubernetes.io/os': 'linux' }, + secrets: am._config.secrets, serviceAccountName: am.serviceAccount.metadata.name, securityContext: { runAsUser: 1000, diff --git a/manifests/alertmanager-alertmanager.yaml b/manifests/alertmanager-alertmanager.yaml index 6389e641..c494e5ce 100644 --- a/manifests/alertmanager-alertmanager.yaml +++ b/manifests/alertmanager-alertmanager.yaml @@ -28,6 +28,7 @@ spec: requests: cpu: 4m memory: 100Mi + secrets: [] securityContext: fsGroup: 2000 runAsNonRoot: true