run make generate

2023-08-07 13:02:07 +02:00
parent 1e55a4057c
commit cc29fc2bfd
6 changed files with 16 additions and 0 deletions
--- a/manifests/blackboxExporter-deployment.yaml
+++ b/manifests/blackboxExporter-deployment.yaml
@@ -105,6 +105,8 @@ spec:
          runAsGroup: 65532
          runAsNonRoot: true
          runAsUser: 65532
+          seccompProfile:
+            type: RuntimeDefault
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: blackbox-exporter
--- a/manifests/kubeStateMetrics-deployment.yaml
+++ b/manifests/kubeStateMetrics-deployment.yaml
@@ -76,6 +76,8 @@ spec:
          runAsGroup: 65532
          runAsNonRoot: true
          runAsUser: 65532
+          seccompProfile:
+            type: RuntimeDefault
      - args:
        - --secure-listen-address=:9443
        - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
@@ -101,6 +103,8 @@ spec:
          runAsGroup: 65532
          runAsNonRoot: true
          runAsUser: 65532
+          seccompProfile:
+            type: RuntimeDefault
      nodeSelector:
        kubernetes.io/os: linux
      serviceAccountName: kube-state-metrics
--- a/manifests/nodeExporter-daemonset.yaml
+++ b/manifests/nodeExporter-daemonset.yaml
@@ -94,6 +94,8 @@ spec:
          runAsGroup: 65532
          runAsNonRoot: true
          runAsUser: 65532
+          seccompProfile:
+            type: RuntimeDefault
      hostNetwork: true
      hostPID: true
      nodeSelector:
--- a/manifests/prometheusAdapter-deployment.yaml
+++ b/manifests/prometheusAdapter-deployment.yaml
@@ -70,6 +70,9 @@ spec:
            drop:
            - ALL
          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
        startupProbe:
          failureThreshold: 18
          httpGet:
--- a/manifests/prometheusOperator-deployment.yaml
+++ b/manifests/prometheusOperator-deployment.yaml
@@ -73,6 +73,8 @@ spec:
          runAsGroup: 65532
          runAsNonRoot: true
          runAsUser: 65532
+          seccompProfile:
+            type: RuntimeDefault
      nodeSelector:
        kubernetes.io/os: linux
      securityContext:
--- a/manifests/setup/namespace.yaml
+++ b/manifests/setup/namespace.yaml
@@ -1,4 +1,7 @@
 apiVersion: v1
 kind: Namespace
 metadata:
+  labels:
+    pod-security.kubernetes.io/warn: privileged
+    pod-security.kubernetes.io/warn-version: latest
  name: monitoring