ci: Add runAsGroup for blackbox exporter containers

2024-05-13 09:20:00 +01:00
parent 2a07e4579e
commit d1ec0ab362
2 changed files with 4 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/blackbox-exporter.libsonnet
+++ b/jsonnet/kube-prometheus/components/blackbox-exporter.libsonnet
@@ -183,6 +183,7 @@ function(params) {
      } else {
        runAsNonRoot: true,
        runAsUser: 65534,
+        runAsGroup: 65534,
        allowPrivilegeEscalation: false,
        readOnlyRootFilesystem: true,
        capabilities: { drop: ['ALL'] },
@@ -205,6 +206,7 @@ function(params) {
      securityContext: {
        runAsNonRoot: true,
        runAsUser: 65534,
+        runAsGroup: 65534,
        allowPrivilegeEscalation: false,
        readOnlyRootFilesystem: true,
        capabilities: { drop: ['ALL'] },