Skip to content
Snippets Groups Projects
Unverified Commit befa960a authored by paulfantom's avatar paulfantom
Browse files

jsonnet/kube-prometheus: kube-rbac-proxy should run as UID 65532

parent 7f500041
No related branches found
No related tags found
No related merge requests found
......@@ -41,7 +41,9 @@
{ name: krp.config.kubeRbacProxy.securePortName, containerPort: krp.config.kubeRbacProxy.securePort },
],
securityContext: {
runAsUser: 65534,
runAsUser: 65532,
runAsGroup: 65532,
runAsNonRoot: true,
},
}],
},
......
......@@ -103,6 +103,11 @@
{ name: 'https', containerPort: $._config.nodeExporter.port, hostPort: $._config.nodeExporter.port },
],
resources: $._config.resources['kube-rbac-proxy'],
securityContext: {
runAsUser: 65532,
runAsGroup: 65532,
runAsNonRoot: true,
},
};
{
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment