easylinux/kube-prometheus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: Add runAsGroup for node_exporter sidecars

Browse Source
This commit is contained in:
Philip Gough
2024-05-13 10:38:33 +01:00
parent 2147ea0079
commit e8995efcf9
2 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
jsonnet/kube-prometheus/components/node-exporter.libsonnet
View File

@@ -295,6 +295,7 @@ function(params) {
serviceAccountName: ne._config.name, serviceAccountName: ne._config.name,
priorityClassName: 'system-cluster-critical', priorityClassName: 'system-cluster-critical',
securityContext: { securityContext: {
runAsGroup: 65534,
runAsUser: 65534, runAsUser: 65534,
runAsNonRoot: true, runAsNonRoot: true,
}, },

1
manifests/nodeExporter-daemonset.yaml
View File

@@ -102,6 +102,7 @@ spec:
kubernetes.io/os: linux kubernetes.io/os: linux
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
securityContext: securityContext:
runAsGroup: 65534
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65534 runAsUser: 65534
serviceAccountName: node-exporter serviceAccountName: node-exporter