Skip to content
Snippets Groups Projects
Commit e8995efc authored by Philip Gough's avatar Philip Gough
Browse files

ci: Add runAsGroup for node_exporter sidecars

parent 2147ea00
No related branches found
No related tags found
No related merge requests found
Show whitespace changes
Inline Side-by-side
jsonnet/kube-prometheus/components/node-exporter.libsonnet
+ 1
− 0
View file @ e8995efc
...@@ -295,6 +295,7 @@ function(params) { ...@@ -295,6 +295,7 @@ function(params) {
serviceAccountName: ne._config.name, serviceAccountName: ne._config.name,
priorityClassName: 'system-cluster-critical', priorityClassName: 'system-cluster-critical',
securityContext: { securityContext: {
runAsGroup: 65534,
runAsUser: 65534, runAsUser: 65534,
runAsNonRoot: true, runAsNonRoot: true,
}, },
......
manifests/nodeExporter-daemonset.yaml
+ 1
− 0
View file @ e8995efc
...@@ -102,6 +102,7 @@ spec: ...@@ -102,6 +102,7 @@ spec:
kubernetes.io/os: linux kubernetes.io/os: linux
priorityClassName: system-cluster-critical priorityClassName: system-cluster-critical
securityContext: securityContext:
runAsGroup: 65534
runAsNonRoot: true runAsNonRoot: true
runAsUser: 65534 runAsUser: 65534
serviceAccountName: node-exporter serviceAccountName: node-exporter
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment