*: Regenerate after adding securityContext to manifests

2018-12-07 17:37:24 +01:00
parent dee254fa01
commit 88e11d48c2
3 changed files with 9 additions and 1 deletions
--- a/jsonnetfile.lock.json
+++ b/jsonnetfile.lock.json
@@ -8,7 +8,7 @@
                    "subdir": "contrib/kube-prometheus/jsonnet/kube-prometheus"
                }
            },
-            "version": "433616b23b9c4bce759bc99c35ca2a66348c36b8"
+            "version": "cc1d3b421e00f8891582ba9692b78814220c69c6"
        },
        {
            "name": "ksonnet",
--- a/manifests/alertmanager-alertmanager.yaml
+++ b/manifests/alertmanager-alertmanager.yaml
@@ -10,5 +10,9 @@ spec:
  nodeSelector:
    beta.kubernetes.io/os: linux
  replicas: 3
+  securityContext:
+    fsGroup: 2000
+    runAsNonRoot: true
+    runAsUser: 1000
  serviceAccountName: alertmanager-main
  version: v0.15.3
--- a/manifests/prometheus-prometheus.yaml
+++ b/manifests/prometheus-prometheus.yaml
@@ -22,6 +22,10 @@ spec:
    matchLabels:
      prometheus: k8s
      role: alert-rules
+  securityContext:
+    fsGroup: 2000
+    runAsNonRoot: true
+    runAsUser: 1000
  serviceAccountName: prometheus-k8s
  serviceMonitorNamespaceSelector: {}
  serviceMonitorSelector: {}