Merge pull request #2423 from philipgough/ci-fix-grafana

prometheus-operator · May 13, 2024 · cb55161 · cb55161
2 parents e3afd46 + d0b0b0d
commit cb55161
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/jsonnet/kube-prometheus/components/grafana.libsonnet b/jsonnet/kube-prometheus/components/grafana.libsonnet
@@ -116,6 +116,9 @@ function(params)
         template+: {
           spec+: {
             automountServiceAccountToken: false,
+            securityContext+: {
+              runAsGroup: 65534,
+            },
           },
         },
       },

diff --git a/manifests/grafana-deployment.yaml b/manifests/grafana-deployment.yaml
@@ -152,6 +152,7 @@ spec:
         kubernetes.io/os: linux
       securityContext:
         fsGroup: 65534
+        runAsGroup: 65534
         runAsNonRoot: true
         runAsUser: 65534
       serviceAccountName: grafana