Skip to content
Snippets Groups Projects
Commit d0b0b0d0 authored by Philip Gough's avatar Philip Gough
Browse files

ci: Add runAsGroup for Grafana Deployment

parent 2147ea00
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
jsonnet/kube-prometheus/components/grafana.libsonnet
+ 3
− 0
View file @ d0b0b0d0
...@@ -116,6 +116,9 @@ function(params) ...@@ -116,6 +116,9 @@ function(params)
template+: { template+: {
spec+: { spec+: {
automountServiceAccountToken: false, automountServiceAccountToken: false,
securityContext+: {
runAsGroup: 65534,
},
}, },
}, },
}, },
......
manifests/grafana-deployment.yaml
+ 1
− 0
View file @ d0b0b0d0
...@@ -152,6 +152,7 @@ spec: ...@@ -152,6 +152,7 @@ spec:
kubernetes.io/os: linux kubernetes.io/os: linux
securityContext: securityContext:
fsGroup: 65534 fsGroup: 65534
runAsGroup: 65534
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65534 runAsUser: 65534
serviceAccountName: grafana serviceAccountName: grafana
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment