adding security context to kube-rbac-proxy

2020-03-12 14:51:06 -04:00
parent b100eead2e
commit e7d1d7c7c3
1 changed files with 1 additions and 0 deletions
--- a/jsonnet/kube-prometheus/kube-rbac-proxy/container.libsonnet
+++ b/jsonnet/kube-prometheus/kube-rbac-proxy/container.libsonnet
@@ -35,6 +35,7 @@ local containerPort = container.portsType;
        spec+: {
          containers+: [
            container.new(krp.config.kubeRbacProxy.name, krp.config.kubeRbacProxy.image) +
+            container.mixin.securityContext.withRunAsUser(65534) +	    
            container.withArgs([
              '--logtostderr',
              '--secure-listen-address=' + krp.config.kubeRbacProxy.secureListenAddress,