fix: security context to allow disk writes (#73)

current settings did not allow prometheus to write files. the folder was created correctly under /data but it then failed with missing write permissions
cloudoperators · Apr 26, 2024 · 755db57 · 755db57
1 parent 577948f
commit 755db57
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/kube-monitoring/charts/Chart.yaml b/kube-monitoring/charts/Chart.yaml
@@ -8,7 +8,7 @@ maintainers:
 name: kube-monitoring
 sources:
   - https://github.com/cloudoperators/greenhouse-extensions
-version: 0.6.5
+version: 0.6.6
 # prometheus-operator app version
 appVersion: v0.71.2
 keywords:

diff --git a/kube-monitoring/charts/values.yaml b/kube-monitoring/charts/values.yaml
@@ -218,6 +218,15 @@ kubeMonitoring:
         matchLabels:
           pluginconfig: "{{ $.Release.Name }}"
 
+      ## securityContext for pod-level security attributes
+      securityContext:
+        # runAsGroup: 2000
+        # runAsNonRoot: true
+        runAsUser: 0  # 1000
+        fsGroup: 0  # 2000
+        # seccompProfile:
+          # type: RuntimeDefault
+
 alerts:
   enabled: false
   alertmanagers: