diff --git a/jsonnet/kube-prometheus/components/node-exporter.libsonnet b/jsonnet/kube-prometheus/components/node-exporter.libsonnet index d43eec53df9c030311e11b488fde1bcce0d88e46..21aa9e28596ef5f53273c1e1d5066e3fe21f2642 100644 --- a/jsonnet/kube-prometheus/components/node-exporter.libsonnet +++ b/jsonnet/kube-prometheus/components/node-exporter.libsonnet @@ -295,6 +295,7 @@ function(params) { serviceAccountName: ne._config.name, priorityClassName: 'system-cluster-critical', securityContext: { + runAsGroup: 65534, runAsUser: 65534, runAsNonRoot: true, }, diff --git a/manifests/nodeExporter-daemonset.yaml b/manifests/nodeExporter-daemonset.yaml index 52a9975d5f996a17bb5b9cf26c8631c511378188..711b0037bf2562c06402f6061b966b5a94421bc1 100644 --- a/manifests/nodeExporter-daemonset.yaml +++ b/manifests/nodeExporter-daemonset.yaml @@ -102,6 +102,7 @@ spec: kubernetes.io/os: linux priorityClassName: system-cluster-critical securityContext: + runAsGroup: 65534 runAsNonRoot: true runAsUser: 65534 serviceAccountName: node-exporter