diff --git a/jsonnet/kube-prometheus/kube-rbac-proxy/container.libsonnet b/jsonnet/kube-prometheus/kube-rbac-proxy/container.libsonnet index 8f70486c..c5934732 100644 --- a/jsonnet/kube-prometheus/kube-rbac-proxy/container.libsonnet +++ b/jsonnet/kube-prometheus/kube-rbac-proxy/container.libsonnet @@ -35,6 +35,7 @@ local containerPort = container.portsType; spec+: { containers+: [ container.new(krp.config.kubeRbacProxy.name, krp.config.kubeRbacProxy.image) + + container.mixin.securityContext.withRunAsUser(65534) + container.withArgs([ '--logtostderr', '--secure-listen-address=' + krp.config.kubeRbacProxy.secureListenAddress,