prometheus-community / helm-charts

Prometheus community Helm charts
Apache License 2.0
5.06k stars 5.01k forks source link

[kube-prometheus-stack] How do we update SecurityContext for containers inside Prometheus Pod #4933

Open sravanikollipara opened 20 hours ago

sravanikollipara commented 20 hours ago

Describe the bug a clear and concise description of what the bug is.

How do we update SecurityContext for containers inside Prometheus Pod. There are init-config-reloader/config-reloader/prometheus and how do we update SecurityContext for container to have it run with runAsNonRoot: true runAsUser: 1000

What's your helm version?

v3.16.2

What's your kubectl version?

Client Version: version.Info{Major:"1", Minor:"22", GitVersion:"v1.22.0", GitCommit:"c2b5237ccd9c0f1d600d3072634ca66cefdf272f", GitTreeState:"clean", BuildDate:"2021-08-04T17:56:19Z", GoVersion:"go1.16.6", Compiler:"gc", Platform:"darwin/amd64"} Server Version: version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.2", GitCommit:"092fbfbf53427de67cac1e9fa54aaa09a28371d7", GitTreeState:"clean", BuildDate:"2021-06-16T12:53:14Z", GoVersion:"go1.16.5", Compiler:"gc", Platform:"linux/amd64"}

Which chart?

prometheus

What's the chart version?

apiVersion: v2

What happened?

No response

What you expected to happen?

No response

How to reproduce it?

No response

Enter the changed values of values.yaml?

No response

Enter the command that you execute and failing/misfunctioning.

helm install my-release prometheus-community/kube-prometheus-stack --namespace monitoring --create-namespace -f values.yaml

Anything else we need to know?

No response

zeritti commented 8 hours ago

Configuration of the managed containers can be overriden through the chart's prometheus.prometheusSpec.containers for containers prometheus, config-reloader and thanos-sidecar.

Similarly for managed init containers by means of prometheus.prometheusSpec.initContainers for container init-config-reloader.

More info in strategic merge patch and prometheus CRD.