ci: Add runAsGroup for Grafana Deployment

2024-05-13 10:33:38 +01:00
parent 2147ea0079
commit d0b0b0d087
2 changed files with 4 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/grafana.libsonnet
+++ b/jsonnet/kube-prometheus/components/grafana.libsonnet
@@ -116,6 +116,9 @@ function(params)
        template+: {
          spec+: {
            automountServiceAccountToken: false,
+            securityContext+: {
+              runAsGroup: 65534,
+            },
          },
        },
      },
--- a/manifests/grafana-deployment.yaml
+++ b/manifests/grafana-deployment.yaml
@@ -152,6 +152,7 @@ spec:
        kubernetes.io/os: linux
      securityContext:
        fsGroup: 65534
+        runAsGroup: 65534
        runAsNonRoot: true
        runAsUser: 65534
      serviceAccountName: grafana