From 20fa80fb4c7ca061d45c889ae41522631003dfbd Mon Sep 17 00:00:00 2001
From: paulfantom <pawel@krupa.net.pl>
Date: Mon, 23 Nov 2020 11:28:14 +0100
Subject: [PATCH] manifests: regenerate
---
manifests/kube-state-metrics-deployment.yaml | 8 ++++++--
manifests/node-exporter-daemonset.yaml | 4 ++++
manifests/setup/prometheus-operator-deployment.yaml | 4 +++-
3 files changed, 13 insertions(+), 3 deletions(-)
diff --git a/manifests/kube-state-metrics-deployment.yaml b/manifests/kube-state-metrics-deployment.yaml
index b54e6414..9bda5c69 100644
--- a/manifests/kube-state-metrics-deployment.yaml
+++ b/manifests/kube-state-metrics-deployment.yaml
@@ -36,7 +36,9 @@ spec:
- containerPort: 8443
name: https-main
securityContext:
- runAsUser: 65534
+ runAsGroup: 65532
+ runAsNonRoot: true
+ runAsUser: 65532
- args:
- --logtostderr
- --secure-listen-address=:9443
@@ -48,7 +50,9 @@ spec:
- containerPort: 9443
name: https-self
securityContext:
- runAsUser: 65534
+ runAsGroup: 65532
+ runAsNonRoot: true
+ runAsUser: 65532
nodeSelector:
kubernetes.io/os: linux
serviceAccountName: kube-state-metrics
diff --git a/manifests/node-exporter-daemonset.yaml b/manifests/node-exporter-daemonset.yaml
index 32a4e6cf..9a6f163d 100644
--- a/manifests/node-exporter-daemonset.yaml
+++ b/manifests/node-exporter-daemonset.yaml
@@ -70,6 +70,10 @@ spec:
requests:
cpu: 10m
memory: 20Mi
+ securityContext:
+ runAsGroup: 65532
+ runAsNonRoot: true
+ runAsUser: 65532
hostNetwork: true
hostPID: true
nodeSelector:
diff --git a/manifests/setup/prometheus-operator-deployment.yaml b/manifests/setup/prometheus-operator-deployment.yaml
index 119f6390..d4fc4b3f 100644
--- a/manifests/setup/prometheus-operator-deployment.yaml
+++ b/manifests/setup/prometheus-operator-deployment.yaml
@@ -50,7 +50,9 @@ spec:
- containerPort: 8443
name: https
securityContext:
- runAsUser: 65534
+ runAsGroup: 65532
+ runAsNonRoot: true
+ runAsUser: 65532
nodeSelector:
beta.kubernetes.io/os: linux
securityContext:
--
GitLab