Merge pull request #2428 from philipgough/ci-fix-prom

ci: Add runAsGroup for prom operator Deployment

Merge pull request #2428 from philipgough/ci-fix-prom
01c0e7d1 · Kemal Akkoyun · GitHub · c523c26a · e8f461ba · 01c0e7d1
Unverified Commit 01c0e7d1 authored 1 year ago by Kemal Akkoyun Committed by GitHub 1 year ago
--- a/jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
+++ b/jsonnet/kube-prometheus/components/prometheus-operator.libsonnet
@@ -163,6 +163,9 @@ function(params)
        template+: {
          spec+: {
            automountServiceAccountToken: true,
+            securityContext+: {
+              runAsGroup: 65534,
+            },
            containers+: [kubeRbacProxy],
          },
        },

--- a/manifests/prometheusOperator-deployment.yaml
+++ b/manifests/prometheusOperator-deployment.yaml
@@ -81,6 +81,7 @@ spec:
      nodeSelector:
        kubernetes.io/os: linux
      securityContext:
+        runAsGroup: 65534
        runAsNonRoot: true
        runAsUser: 65534
        seccompProfile: