Merge pull request #4303 from damienleger/priorityclass-securitycontext

[CA] [AWS examples] Add priorityClassName & securityContext & upgrade image
This commit is contained in:
Kubernetes Prow Robot 2021-09-20 01:14:09 -07:00 committed by GitHub
commit 6586d0c1ad
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 20 additions and 4 deletions

View File

@ -137,9 +137,13 @@ spec:
prometheus.io/scrape: 'true' prometheus.io/scrape: 'true'
prometheus.io/port: '8085' prometheus.io/port: '8085'
spec: spec:
priorityClassName: system-cluster-critical
securityContext:
runAsNonRoot: true
runAsUser: 65534
serviceAccountName: cluster-autoscaler serviceAccountName: cluster-autoscaler
containers: containers:
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.17.3 - image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.21.0
name: cluster-autoscaler name: cluster-autoscaler
resources: resources:
limits: limits:

View File

@ -137,9 +137,13 @@ spec:
prometheus.io/scrape: 'true' prometheus.io/scrape: 'true'
prometheus.io/port: '8085' prometheus.io/port: '8085'
spec: spec:
priorityClassName: system-cluster-critical
securityContext:
runAsNonRoot: true
runAsUser: 65534
serviceAccountName: cluster-autoscaler serviceAccountName: cluster-autoscaler
containers: containers:
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.17.3 - image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.21.0
name: cluster-autoscaler name: cluster-autoscaler
resources: resources:
limits: limits:

View File

@ -137,9 +137,13 @@ spec:
prometheus.io/scrape: 'true' prometheus.io/scrape: 'true'
prometheus.io/port: '8085' prometheus.io/port: '8085'
spec: spec:
priorityClassName: system-cluster-critical
securityContext:
runAsNonRoot: true
runAsUser: 65534
serviceAccountName: cluster-autoscaler serviceAccountName: cluster-autoscaler
containers: containers:
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.17.3 - image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.21.0
name: cluster-autoscaler name: cluster-autoscaler
resources: resources:
limits: limits:

View File

@ -137,6 +137,10 @@ spec:
prometheus.io/scrape: 'true' prometheus.io/scrape: 'true'
prometheus.io/port: '8085' prometheus.io/port: '8085'
spec: spec:
priorityClassName: system-cluster-critical
securityContext:
runAsNonRoot: true
runAsUser: 65534
serviceAccountName: cluster-autoscaler serviceAccountName: cluster-autoscaler
tolerations: tolerations:
- effect: NoSchedule - effect: NoSchedule
@ -146,7 +150,7 @@ spec:
nodeSelector: nodeSelector:
kubernetes.io/role: master kubernetes.io/role: master
containers: containers:
- image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.17.3 - image: k8s.gcr.io/autoscaling/cluster-autoscaler:v1.21.0
name: cluster-autoscaler name: cluster-autoscaler
resources: resources:
limits: limits: