red-hat-data-services / odh-deployer

The odh-deployer image creates a custom resource for the image in operator image in odh-operator-allinone
Apache License 2.0
5 stars 42 forks source link

Fix Security policies for prometheus container #294

Closed rimolive closed 1 year ago

rimolive commented 1 year ago

PR #290 added a Pod Security policy for prometheus pods, but some paths were mounted as read-only. This PR will grant permissions to prometheus pod to write data as expected.

Description

Added a securityContext so volumes can be mounted as read-write.

How Has This Been Tested?

Merge criteria:

openshift-ci[bot] commented 1 year ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Once this PR has been reviewed and has the lgtm label, please assign vaishnavihire for approval by writing /assign @vaishnavihire in a comment. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/red-hat-data-services/odh-deployer/blob/rhods-1.21/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment