patch prometheus security resources

caas-team · Sep 18, 2023 · 2a47eae · 2a47eae
1 parent bffe682
commit 2a47eae
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/templates/prometheus-patch.yaml b/templates/prometheus-patch.yaml
@@ -0,0 +1,20 @@
+apiVersion: monitoring.coreos.com/v1
+kind: Prometheus
+metadata:
+  name: project-monitoring-prometheus
+spec:
+  containers:
+  - name: config-reloader
+    securityContext:
+      allowPrivilegeEscalation: false
+      capabilities:
+        drop:
+        - ALL
+      privileged: false
+      readOnlyRootFilesystem: true
+      runAsUser: 1000
+      runAsGroup: 1000
+  securityContext:
+    fsGroup: 1000
+    supplementalGroups:
+    - 1000