diff --git a/manifests/prometheus-operator.yaml b/manifests/prometheus-operator.yaml index eb6e478..be29d89 100644 --- a/manifests/prometheus-operator.yaml +++ b/manifests/prometheus-operator.yaml @@ -636,24 +636,11 @@ spec: ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ ## affinity: {} - # nodeAffinity: - # requiredDuringSchedulingIgnoredDuringExecution: - # nodeSelectorTerms: - # - matchExpressions: - # - key: kubernetes.io/e2e-az-name - # operator: In - # values: - # - e2e-az1 - # - e2e-az2 ## If specified, the pod's tolerations. ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ ## tolerations: [] - # - key: "key" - # operator: "Equal" - # value: "value" - # effect: "NoSchedule" ## If specified, the pod's topology spread constraints. ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ @@ -671,10 +658,10 @@ spec: ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ ## securityContext: - runAsGroup: 2000 + runAsGroup: 1000 runAsNonRoot: true runAsUser: 1000 - fsGroup: 2000 + fsGroup: 1000 ## ListenLocal makes the Alertmanager server listen on loopback, so that it does not bind against the Pod IP. ## Note this is only for the Alertmanager UI, not the gossip communication. @@ -1661,9 +1648,9 @@ spec: ## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/ ## securityContext: - runAsGroup: 2000 + runAsGroup: 1000 runAsNonRoot: true - runAsUser: 2000 + runAsUser: 1000 # Security context for create job container createSecretJob: @@ -1871,24 +1858,11 @@ spec: ## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/ ## tolerations: [] - # - key: "key" - # operator: "Equal" - # value: "value" - # effect: "NoSchedule" ## Assign custom affinity rules to the prometheus operator ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ ## affinity: {} - # nodeAffinity: - # requiredDuringSchedulingIgnoredDuringExecution: - # nodeSelectorTerms: - # - matchExpressions: - # - key: kubernetes.io/e2e-az-name - # operator: In - # values: - # - e2e-az1 - # - e2e-az2 dnsConfig: {} # nameservers: # - 1.2.3.4 @@ -2307,17 +2281,17 @@ spec: ## tolerations: - key: "node" - operator: "Equal" - value: "special" - effect: "NoSchedule" - - key: node-role.kubernetes.io/master - operator: Equal - value: "" - effect: NoSchedule - - key: node-role.kubernetes.io/control-plane - operator: Equal - value: "" - effect: NoSchedule + operator: "Equal" + value: "special" + effect: "NoSchedule" + - key: node-role.kubernetes.io/master + operator: Equal + value: "" + effect: NoSchedule + - key: node-role.kubernetes.io/control-plane + operator: Equal + value: "" + effect: NoSchedule ## If specified, the pod's topology spread constraints. ## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/ @@ -2736,10 +2710,10 @@ spec: ## https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md ## securityContext: - runAsGroup: 2000 + runAsGroup: 1000 runAsNonRoot: true runAsUser: 1000 - fsGroup: 2000 + fsGroup: 1000 ## Priority class assigned to the Pods ##