kubernetes
/
kube-state-metrics
mirror of https://github.com/kubernetes/kube-state-metrics.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

jsonnet: explicitly forbid privilege escalation 

Signed-off-by: ArthurSens <arthursens2005@gmail.com>
This commit is contained in:
Arthur Silva Sens 2022-01-21 20:31:28 +00:00 committed by ArthurSens
parent 98c833322c
commit 8d2587a6a1
3 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
examples/autosharding/statefulset.yaml
View File

@ -54,6 +54,7 @@ spec:
initialDelaySeconds: 5
timeoutSeconds: 5
securityContext:
allowPrivilegeEscalation: false
runAsUser: 65534
nodeSelector:
kubernetes.io/os: linux

1
examples/standard/deployment.yaml
View File

@ -41,6 +41,7 @@ spec:
initialDelaySeconds: 5
timeoutSeconds: 5
securityContext:
allowPrivilegeEscalation: false
runAsUser: 65534
nodeSelector:
kubernetes.io/os: linux

2
jsonnet/kube-state-metrics/kube-state-metrics.libsonnet
View File

@ -163,7 +163,7 @@
{ name: 'http-metrics', containerPort: 8080 },
{ name: 'telemetry', containerPort: 8081 },
],
securityContext: { runAsUser: 65534 },
securityContext: { runAsUser: 65534, allowPrivilegeEscalation: false },
livenessProbe: { timeoutSeconds: 5, initialDelaySeconds: 5, httpGet: {
port: 8080,
path: '/healthz',