Merge pull request #2423 from philipgough/ci-fix-grafana

2024-05-13 12:07:04 +02:00
parent e3afd46d5c d0b0b0d087
commit cb55161e24
2 changed files with 4 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/grafana.libsonnet
+++ b/jsonnet/kube-prometheus/components/grafana.libsonnet
@@ -116,6 +116,9 @@ function(params)
        template+: {
          spec+: {
            automountServiceAccountToken: false,
+            securityContext+: {
+              runAsGroup: 65534,
+            },
          },
        },
      },
--- a/manifests/grafana-deployment.yaml
+++ b/manifests/grafana-deployment.yaml
@@ -152,6 +152,7 @@ spec:
        kubernetes.io/os: linux
      securityContext:
        fsGroup: 65534
+        runAsGroup: 65534
        runAsNonRoot: true
        runAsUser: 65534
      serviceAccountName: grafana