easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

*: Regenerate after adding securityContext to manifests

Browse Source
This commit is contained in:
Matthias Loibl
2018-12-07 17:37:24 +01:00
parent dee254fa01
commit 88e11d48c2
3 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
jsonnetfile.lock.json
View File

@@ -8,7 +8,7 @@
"subdir": "contrib/kube-prometheus/jsonnet/kube-prometheus" "subdir": "contrib/kube-prometheus/jsonnet/kube-prometheus"
} }
}, },
"version": "433616b23b9c4bce759bc99c35ca2a66348c36b8" "version": "cc1d3b421e00f8891582ba9692b78814220c69c6"
}, },
{ {
"name": "ksonnet", "name": "ksonnet",

4
manifests/alertmanager-alertmanager.yaml
View File

@@ -10,5 +10,9 @@ spec:
nodeSelector: nodeSelector:
beta.kubernetes.io/os: linux beta.kubernetes.io/os: linux
replicas: 3 replicas: 3
securityContext:
fsGroup: 2000
runAsNonRoot: true
runAsUser: 1000
serviceAccountName: alertmanager-main serviceAccountName: alertmanager-main
version: v0.15.3 version: v0.15.3

4
manifests/prometheus-prometheus.yaml
View File

@@ -22,6 +22,10 @@ spec:
matchLabels: matchLabels:
prometheus: k8s prometheus: k8s
role: alert-rules role: alert-rules
securityContext:
fsGroup: 2000
runAsNonRoot: true
runAsUser: 1000
serviceAccountName: prometheus-k8s serviceAccountName: prometheus-k8s
serviceMonitorNamespaceSelector: {} serviceMonitorNamespaceSelector: {}
serviceMonitorSelector: {} serviceMonitorSelector: {}