Max Inden efe686c0c0 security: Enforce nobody user and read only / (#1393) ...

* Make the Prometheus Operator Docker image run as `nobody` by default.
* Disallow privilege escalation via K8s
* Enforce read only root filesystem

2018-07-17 15:11:46 +02:00

..

0prometheus-operator-0alertmanagerCustomResourceDefinition.yaml

*: Allow settings custom tags of container images

2018-07-09 13:23:00 +02:00

0prometheus-operator-0prometheusCustomResourceDefinition.yaml

*: Allow settings custom tags of container images

2018-07-09 13:23:00 +02:00

0prometheus-operator-0prometheusruleCustomResourceDefinition.yaml

*: Fix CRD generation

2018-07-02 16:54:56 +02:00

0prometheus-operator-0servicemonitorCustomResourceDefinition.yaml

*: Fix CRD generation

2018-07-02 16:54:56 +02:00

0prometheus-operator-clusterRole.yaml

*: Rename RuleFile to PrometheusRule

2018-06-05 13:34:13 +02:00

0prometheus-operator-clusterRoleBinding.yaml

Address comments

2018-05-06 08:29:52 -07:00

0prometheus-operator-deployment.yaml

security: Enforce nobody user and read only / (#1393)

2018-07-17 15:11:46 +02:00

0prometheus-operator-service.yaml

kube-prometheus/jsonnet: Use jsonnet-bundler

2018-04-28 19:05:19 +01:00

0prometheus-operator-serviceAccount.yaml

Address comments

2018-05-06 08:29:52 -07:00

0prometheus-operator-serviceMonitor.yaml

kube-prometheus: Remove unnecessary namespace selectors

2018-05-31 17:37:43 +02:00

00namespace-namespace.yaml

Address comments

2018-05-06 08:29:52 -07:00

alertmanager-alertmanager.yaml

kube-prometheus: Bump various versions

2018-06-25 13:48:36 +02:00

alertmanager-secret.yaml

kube-prometheus: Add docs on how to set Alertmanager configuration

2018-06-07 11:53:37 +02:00

alertmanager-service.yaml

kube-prometheus/jsonnet: Use jsonnet-bundler

2018-04-28 19:05:19 +01:00

alertmanager-serviceAccount.yaml

Address comments

2018-05-06 08:29:52 -07:00

alertmanager-serviceMonitor.yaml

kube-prometheus: Remove unnecessary namespace selectors

2018-05-31 17:37:43 +02:00

grafana-dashboardDatasources.yaml

kube-prometheus: Re-generate Grafana jsonnet dependency

2018-06-28 17:31:58 +02:00

grafana-dashboardDefinitions.yaml

Makefile: Properly rebuild po-docgen on src changes (#1625)

2018-07-17 15:10:38 +02:00

grafana-dashboardSources.yaml

Address comments

2018-05-06 08:29:52 -07:00

grafana-deployment.yaml

kube-prometheus: Re-generate Grafana jsonnet dependency

2018-06-28 17:31:58 +02:00

grafana-service.yaml

kube-prometheus/jsonnet: Use jsonnet-bundler

2018-04-28 19:05:19 +01:00

grafana-serviceAccount.yaml

Address comments

2018-05-06 08:29:52 -07:00

kube-state-metrics-clusterRole.yaml

Address comments

2018-05-06 08:29:52 -07:00

kube-state-metrics-clusterRoleBinding.yaml

Address comments

2018-05-06 08:29:52 -07:00

kube-state-metrics-deployment.yaml

kube-prometheus: Bump various versions

2018-06-25 13:48:36 +02:00

kube-state-metrics-role.yaml

kube-prometheus/jsonnet: Use jsonnet-bundler

2018-04-28 19:05:19 +01:00

kube-state-metrics-roleBinding.yaml

Address comments

2018-05-06 08:29:52 -07:00

kube-state-metrics-service.yaml

kube-prometheus/jsonnet: Use jsonnet-bundler

2018-04-28 19:05:19 +01:00

kube-state-metrics-serviceAccount.yaml

Address comments

2018-05-06 08:29:52 -07:00

kube-state-metrics-serviceMonitor.yaml

kube-prometheus: Remove unnecessary namespace selectors

2018-05-31 17:37:43 +02:00

node-exporter-clusterRole.yaml

Address comments

2018-05-06 08:29:52 -07:00

node-exporter-clusterRoleBinding.yaml

Address comments

2018-05-06 08:29:52 -07:00

node-exporter-daemonset.yaml

kube-prometheus: Bump various versions

2018-06-25 13:48:36 +02:00

node-exporter-service.yaml

kube-prometheus/jsonnet: Use jsonnet-bundler

2018-04-28 19:05:19 +01:00

node-exporter-serviceAccount.yaml

Address comments

2018-05-06 08:29:52 -07:00

node-exporter-serviceMonitor.yaml

kube-prometheus: Remove unnecessary namespace selectors

2018-05-31 17:37:43 +02:00

prometheus-clusterRole.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-clusterRoleBinding.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-prometheus.yaml

kube-prometheus: Bump various versions

2018-06-25 13:48:36 +02:00

prometheus-roleBindingConfig.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-roleBindingDefault.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-roleBindingKubeSystem.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-roleBindingNamespace.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-roleConfig.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-roleDefault.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-roleKubeSystem.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-roleNamespace.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-rules.yaml

Makefile: Properly rebuild po-docgen on src changes (#1625)

2018-07-17 15:10:38 +02:00

prometheus-service.yaml

kube-prometheus/jsonnet: Use jsonnet-bundler

2018-04-28 19:05:19 +01:00

prometheus-serviceAccount.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-serviceMonitor.yaml

kube-prometheus: Remove unnecessary namespace selectors

2018-05-31 17:37:43 +02:00

prometheus-serviceMonitorApiserver.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-serviceMonitorCoreDNS.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-serviceMonitorKubeControllerManager.yaml

Address comments

2018-05-06 08:29:52 -07:00

prometheus-serviceMonitorKubelet.yaml

kube-prometheus: Extract prometheus-operator jsonnet out of contrib

2018-06-06 18:01:32 +02:00

prometheus-serviceMonitorKubeScheduler.yaml

Address comments

2018-05-06 08:29:52 -07:00