feat: add securityContext for o11y.prometheus,fix alibaba/higress#727 f…

…ix higress-group#289
OnlyPiglet · Feb 25, 2024 · e5aad32 · e5aad32
1 parent 056686d
commit e5aad32
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/helm/templates/prometheus.yaml b/helm/templates/prometheus.yaml
@@ -134,6 +134,11 @@ spec:
             memory: {{ $config.resources.limits.memory }}
       restartPolicy: Always
       serviceAccountName: {{ $appName }}
+      {{- if .Values.o11y.prometheus.securityContext.enabled }}
+      securityContext:
+        fsGroup: {{ .Values.o11y.prometheus.securityContext.fsGroup }}
+        runAsUser: {{ .Values.o11y.prometheus.securityContext.runAsUser }}
+      {{- end }}
       volumes:
       - name: data
         persistentVolumeClaim:

diff --git a/helm/values.yaml b/helm/values.yaml
@@ -80,6 +80,9 @@ o11y:
       limits:
         cpu: 500m
         memory: 2Gi
-
+    securityContext:
+      enabled: true
+      runAsUser: 0
+      fsGroup: 0
 pvc:
   rwxSupported: true