ci: Add runAsGroup for prom operator Deployment

2024-05-14 10:04:07 +01:00
parent cb55161e24
commit e8f461ba38
2 changed files with 4 additions and 0 deletions
--- a/jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
+++ b/jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
@@ -163,6 +163,9 @@ function(params)
        template+: {
          spec+: {
            automountServiceAccountToken: true,
+            securityContext+: {
+              runAsGroup: 65534,
+            },
            containers+: [kubeRbacProxy],
          },
        },