From 88e11d48c238a781222f61892afb2105e3f6d7d1 Mon Sep 17 00:00:00 2001
From: Matthias Loibl <mail@matthiasloibl.com>
Date: Fri, 7 Dec 2018 17:37:24 +0100
Subject: [PATCH] *: Regenerate after adding securityContext to manifests
---
jsonnetfile.lock.json | 2 +-
manifests/alertmanager-alertmanager.yaml | 4 ++++
manifests/prometheus-prometheus.yaml | 4 ++++
3 files changed, 9 insertions(+), 1 deletion(-)
diff --git a/jsonnetfile.lock.json b/jsonnetfile.lock.json
index 0e75a6d8..e05e4e0a 100644
--- a/jsonnetfile.lock.json
+++ b/jsonnetfile.lock.json
@@ -8,7 +8,7 @@
"subdir": "contrib/kube-prometheus/jsonnet/kube-prometheus"
}
},
- "version": "433616b23b9c4bce759bc99c35ca2a66348c36b8"
+ "version": "cc1d3b421e00f8891582ba9692b78814220c69c6"
},
{
"name": "ksonnet",
diff --git a/manifests/alertmanager-alertmanager.yaml b/manifests/alertmanager-alertmanager.yaml
index 2230ea9e..c6f8ce05 100644
--- a/manifests/alertmanager-alertmanager.yaml
+++ b/manifests/alertmanager-alertmanager.yaml
@@ -10,5 +10,9 @@ spec:
nodeSelector:
beta.kubernetes.io/os: linux
replicas: 3
+ securityContext:
+ fsGroup: 2000
+ runAsNonRoot: true
+ runAsUser: 1000
serviceAccountName: alertmanager-main
version: v0.15.3
diff --git a/manifests/prometheus-prometheus.yaml b/manifests/prometheus-prometheus.yaml
index 94fd64dc..c16914b0 100644
--- a/manifests/prometheus-prometheus.yaml
+++ b/manifests/prometheus-prometheus.yaml
@@ -22,6 +22,10 @@ spec:
matchLabels:
prometheus: k8s
role: alert-rules
+ securityContext:
+ fsGroup: 2000
+ runAsNonRoot: true
+ runAsUser: 1000
serviceAccountName: prometheus-k8s
serviceMonitorNamespaceSelector: {}
serviceMonitorSelector: {}
--
GitLab