Commit Graph

26 Commits

Author SHA1 Message Date
ArthurSens 8918f9b9fe jsonnet: Drop all Linux capabilities
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
2022-02-01 09:15:57 +00:00
Arthur Silva Sens d9aaef0d9d jsonnet: Forbid write access to root filesystem
Signed-off-by: GitHub <noreply@github.com>
2022-01-27 08:51:26 +00:00
Arthur Silva Sens 8d2587a6a1 jsonnet: explicitly forbid privilege escalation
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
2022-01-25 09:14:35 +00:00
Paweł Krupa (paulfantom) 122f3e9783 jsonnet: increase security by specifying automountServiceAccountToken on pod level and not on serviceAccount 2022-01-21 12:47:30 +01:00
Jayapriya Pai fc0e816a2b jsonnet: Add app.kubernetes.io/component label
This was done this way to avoid update failure since matchLabels is an immutable field

Signed-off-by: Jayapriya Pai <slashpai9@gmail.com>
2021-10-01 15:49:28 +05:30
Manuel Rüger 8160f327b0 Merge branch 'release-2.0' into merge-release-2.0 2021-03-26 23:54:14 +01:00
Lili Cosic f895661f3e jsonnet/kube-state-metrics/kube-state-metrics.libsonnet: Remove old API 2021-03-22 13:48:18 +01:00
Mikulas (Mike) Dite fcd8a48b0b Add example sharding alerts 2021-01-18 14:52:04 +00:00
Matthias Loibl 10a2b64c11
Clean up jsonnet dependencies and use absolute imports 2020-10-22 19:24:41 +02:00
Matthias Loibl 3e00845588
Generate YAML manifests without ksonnet
Improving readability and introducing type safety with external tools
like kubeval.

I needed to make change the import to an absolute one, but instead
rather removed the import to begin with, as we're getting rid of ksonnet
for most things now anyway.
2020-10-22 19:21:46 +02:00
Lili Cosic dc89be6b34 jsonnet/kube-state-metrics/kube-state-metrics.libsonnet: Adjust permissions 2020-10-13 14:59:50 +02:00
midnightconman d86f2365f7 Added Namespace to Rolebinding Jsonnet 2020-09-17 11:55:42 -07:00
paulfantom 118cf4e172
jsonnet/mixin: adhere to monitoring mixins guidelines 2020-08-13 09:15:38 +02:00
paulfantom 42c8f26b46
jsonnet/kube-state-metrics-mixin: add default KSM selector 2020-05-15 15:02:37 +02:00
Oleg Mayko 44ab592e3e Remove prefix from version label 2020-02-08 17:44:44 +01:00
asidorovj f5729a5ccb add leases collector 2020-01-30 08:31:01 +03:00
Frederic Branczyk af671c3357
Merge remote-tracking branch 'upstream/release-1.9' into pull-in-1.9.3 2020-01-22 17:53:35 +01:00
Oleg Mayko c210e73205 Add security context to deployment and statefulset 2020-01-22 12:14:17 +01:00
Lili Cosic f2e6b3f76d
jsonnet/kube-state-metrics-mixin/alerts.libsonnet: Fix selector typo
(cherry picked from commit e4e9d325ca)
2019-12-05 02:41:26 -08:00
Lili Cosic e4e9d325ca jsonnet/kube-state-metrics-mixin/alerts.libsonnet: Fix selector typo 2019-12-05 10:18:06 +01:00
Lili Cosic 6cef9652c9
jsonnet/kube-state-metrics: Add missing volumeattachments resource
(cherry picked from commit 6be758aa88)
2019-12-04 22:12:16 -08:00
Lili Cosic be716eb824
jsonnet,scripts: Add kube-state-metrics alerts mixin
(cherry picked from commit 345ded07af)
2019-12-04 22:12:15 -08:00
Lili Cosic 6be758aa88 jsonnet/kube-state-metrics: Add missing volumeattachments resource 2019-12-05 04:00:47 +01:00
Lili Cosic 345ded07af jsonnet,scripts: Add kube-state-metrics alerts mixin 2019-12-05 04:00:47 +01:00
Miles Bryant e780fc34f3
store: export NetworkPolicy objects 2019-10-17 11:49:29 +01:00
Frederic Branczyk 994772a2e4
*: Generate all manifests
Sharding and autosharding introduced a number of manifests that are
very similar, but not identical to the standard manifests. This
introduces generating all manifests using jsonnet and moves them to
the explicit `/examples` directory.
2019-10-02 10:35:06 +02:00