diff --git a/jsonnet/kube-prometheus/components/alertmanager.libsonnet b/jsonnet/kube-prometheus/components/alertmanager.libsonnet index 364b1a35924996dab9bd7901f68c98b3d56d0912..1faf0609c1460ecb672800394414c515f878a63a 100644 --- a/jsonnet/kube-prometheus/components/alertmanager.libsonnet +++ b/jsonnet/kube-prometheus/components/alertmanager.libsonnet @@ -60,6 +60,7 @@ local defaults = { ], }, replicas: 3, + secrets: [], mixin:: { ruleLabels: {}, _config: { @@ -225,6 +226,7 @@ function(params) { }, resources: am._config.resources, nodeSelector: { 'kubernetes.io/os': 'linux' }, + secrets: am._config.secrets, serviceAccountName: am.serviceAccount.metadata.name, securityContext: { runAsUser: 1000, diff --git a/manifests/alertmanager-alertmanager.yaml b/manifests/alertmanager-alertmanager.yaml index 6389e641848b68fe764b8924dd8281b1be48faab..c494e5ce5a371d1ece1819df4719fb36e22dc464 100644 --- a/manifests/alertmanager-alertmanager.yaml +++ b/manifests/alertmanager-alertmanager.yaml @@ -28,6 +28,7 @@ spec: requests: cpu: 4m memory: 100Mi + secrets: [] securityContext: fsGroup: 2000 runAsNonRoot: true