diff --git a/manifests/kube-state-metrics/kube-state-metrics-deployment.yaml b/manifests/kube-state-metrics/kube-state-metrics-deployment.yaml index 6a79f02b6177916b03f16af7c4739a35f42e724f..61f918eb57d638de82466d7fbb9b64fdc1adb85d 100644 --- a/manifests/kube-state-metrics/kube-state-metrics-deployment.yaml +++ b/manifests/kube-state-metrics/kube-state-metrics-deployment.yaml @@ -10,6 +10,9 @@ spec: app: kube-state-metrics spec: serviceAccountName: kube-state-metrics + securityContext: + runAsNonRoot: true + runAsUser: 65534 containers: - name: kube-rbac-proxy-main image: quay.io/brancz/kube-rbac-proxy:v0.2.0 @@ -70,8 +73,8 @@ spec: - /pod_nanny - --container=kube-state-metrics - --cpu=100m - - --extra-cpu=1m - - --memory=100Mi - - --extra-memory=2Mi + - --extra-cpu=2m + - --memory=150Mi + - --extra-memory=30Mi - --threshold=5 - --deployment=kube-state-metrics diff --git a/manifests/prometheus/prometheus-k8s.yaml b/manifests/prometheus/prometheus-k8s.yaml index 08a71023c673825f935e1368de424b5399f59f82..401784fa1d989b5eafa980748ce5559339061851 100644 --- a/manifests/prometheus/prometheus-k8s.yaml +++ b/manifests/prometheus/prometheus-k8s.yaml @@ -6,7 +6,7 @@ metadata: prometheus: k8s spec: replicas: 2 - version: v2.0.0 + version: v2.1.0 serviceAccountName: prometheus-k8s serviceMonitorSelector: matchExpressions: