ci: Add runAsGroup for node_exporter sidecars

2024-05-13 10:38:33 +01:00
parent 2147ea0079
commit e8995efcf9
2 changed files with 2 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/node-exporter.libsonnet
+++ b/jsonnet/kube-prometheus/components/node-exporter.libsonnet
@@ -295,6 +295,7 @@ function(params) {
            serviceAccountName: ne._config.name,
            priorityClassName: 'system-cluster-critical',
            securityContext: {
+              runAsGroup: 65534,
              runAsUser: 65534,
              runAsNonRoot: true,
            },