ci: Add runAsGroup for node_exporter sidecars

2024-05-13 10:38:33 +01:00
parent 2147ea0079
commit e8995efcf9
2 changed files with 2 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/node-exporter.libsonnet
+++ b/jsonnet/kube-prometheus/components/node-exporter.libsonnet
@@ -295,6 +295,7 @@ function(params) {
            serviceAccountName: ne._config.name,
            priorityClassName: 'system-cluster-critical',
            securityContext: {
+              runAsGroup: 65534,
              runAsUser: 65534,
              runAsNonRoot: true,
            },
--- a/manifests/nodeExporter-daemonset.yaml
+++ b/manifests/nodeExporter-daemonset.yaml
@@ -102,6 +102,7 @@ spec:
        kubernetes.io/os: linux
      priorityClassName: system-cluster-critical
      securityContext:
+        runAsGroup: 65534
        runAsNonRoot: true
        runAsUser: 65534
      serviceAccountName: node-exporter