easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: Add runAsGroup for Grafana Deployment

Browse Source
This commit is contained in:
Philip Gough
2024-05-13 10:33:38 +01:00
parent 2147ea0079
commit d0b0b0d087
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
jsonnet/kube-prometheus/components/grafana.libsonnet
View File

@@ -116,6 +116,9 @@ function(params)
template+: { template+: {
spec+: { spec+: {
automountServiceAccountToken: false, automountServiceAccountToken: false,
securityContext+: {
runAsGroup: 65534,
},
}, },
}, },
}, },

1
manifests/grafana-deployment.yaml
View File

@@ -152,6 +152,7 @@ spec:
kubernetes.io/os: linux kubernetes.io/os: linux
securityContext: securityContext:
fsGroup: 65534 fsGroup: 65534
runAsGroup: 65534
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65534 runAsUser: 65534
serviceAccountName: grafana serviceAccountName: grafana