kubernetes
/
kube-state-metrics
mirror of https://github.com/kubernetes/kube-state-metrics.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add security context to deployment and statefulset

This commit is contained in:
Oleg Mayko 2020-01-22 12:14:17 +01:00
parent d35e7ba894
commit c210e73205
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
jsonnet/kube-state-metrics/kube-state-metrics.libsonnet
View File

@ -164,7 +164,8 @@ local k = import 'ksonnet/ksonnet.beta.4/k.libsonnet';
container.mixin.readinessProbe.httpGet.withPath('/') +
container.mixin.readinessProbe.httpGet.withPort(8081) +
container.mixin.readinessProbe.withInitialDelaySeconds(5) +
container.mixin.readinessProbe.withTimeoutSeconds(5);
container.mixin.readinessProbe.withTimeoutSeconds(5) +
container.mixin.securityContext.withRunAsUser(65534);
deployment.new(ksm.name, 1, c, ksm.commonLabels) +
deployment.mixin.metadata.withNamespace(ksm.namespace) +
@ -236,6 +237,7 @@ local k = import 'ksonnet/ksonnet.beta.4/k.libsonnet';
'--pod=$(POD_NAME)',
'--pod-namespace=$(POD_NAMESPACE)',
]) +
container.mixin.securityContext.withRunAsUser(65534) +
container.withEnv([
containerEnv.new('POD_NAME') +
containerEnv.mixin.valueFrom.fieldRef.withFieldPath('metadata.name'),