Drop securityContext since the chown handles the permissions

grafana · Mar 15, 2024 · fe17af1 · fe17af1
1 parent 1564491
commit fe17af1
Show file tree

Hide file tree

Showing 4 changed files with 0 additions and 6 deletions.
diff --git a/operations/jsonnet-compiled/StatefulSet-ingester.yaml b/operations/jsonnet-compiled/StatefulSet-ingester.yaml
@@ -58,8 +58,6 @@ spec:
           name: ingester-data
         - mountPath: /overrides
           name: overrides
-      securityContext:
-        fsGroup: 10001
       terminationGracePeriodSeconds: 1200
       volumes:
       - configMap:

diff --git a/operations/jsonnet-compiled/StatefulSet-metrics-generator.yaml b/operations/jsonnet-compiled/StatefulSet-metrics-generator.yaml
@@ -60,8 +60,6 @@ spec:
           name: metrics-generator-data
         - mountPath: /overrides
           name: overrides
-      securityContext:
-        fsGroup: 10001
       volumes:
       - configMap:
           name: tempo-metrics-generator

diff --git a/operations/jsonnet/microservices/generator.libsonnet b/operations/jsonnet/microservices/generator.libsonnet
@@ -92,7 +92,6 @@
     ]) +
     statefulset.mixin.spec.withPodManagementPolicy('Parallel') +
     $.util.podPriority('high') +
-    statefulset.mixin.spec.template.spec.securityContext.withFsGroup(10001) +  // 10001 is the group ID assigned to Tempo in the Dockerfile
     (if with_anti_affinity then $.util.antiAffinity else {}),
 
   tempo_metrics_generator_statefulset: $.newGeneratorStatefulSet(target_name, self.tempo_metrics_generator_container) + statefulset.mixin.spec.withReplicas($._config.metrics_generator.replicas),

diff --git a/operations/jsonnet/microservices/ingester.libsonnet b/operations/jsonnet/microservices/ingester.libsonnet
@@ -69,7 +69,6 @@
     ]) +
     statefulset.mixin.spec.withPodManagementPolicy('Parallel') +
     statefulset.mixin.spec.template.spec.withTerminationGracePeriodSeconds(1200) +
-    statefulset.mixin.spec.template.spec.securityContext.withFsGroup(10001) +  // 10001 is the group ID assigned to Tempo in the Dockerfile
     $.util.podPriority('high') +
     (if with_anti_affinity then $.util.antiAffinity else {})
   ,