elasticsearch-exporter: Add security context for exporter pod/container
This adds the security context snippet for the elasticsearch prometheus exporter container to set allowPrivilegeEscalation to false and readOnlyRootFilesystem to true Change-Id: Ia80aa9cfc837073fae0a884de5245764147d7ded
This commit is contained in:
parent
73dadd8899
commit
f667804430
elasticsearch
@ -52,8 +52,7 @@ spec:
|
||||
- name: elasticsearch-exporter
|
||||
{{ tuple $envAll "prometheus_elasticsearch_exporter" | include "helm-toolkit.snippets.image" | indent 10 }}
|
||||
{{ tuple $envAll $envAll.Values.pod.resources.exporter | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
{{ dict "envAll" $envAll "application" "elasticsearch_exporter" "container" "elasticsearch_exporter" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 10 }}
|
||||
command:
|
||||
- /tmp/elasticsearch-exporter.sh
|
||||
- start
|
||||
|
@ -116,9 +116,14 @@ pod:
|
||||
elasticsearch-data: localhost/docker-default
|
||||
elasticsearch-client:
|
||||
elasticsearch-client: localhost/docker-default
|
||||
user:
|
||||
security_context:
|
||||
elasticsearch_exporter:
|
||||
uid: 99
|
||||
pod:
|
||||
runAsUser: 99
|
||||
container:
|
||||
elasticsearch_exporter:
|
||||
allowPrivilegeEscalation: false
|
||||
readOnlyRootFilesystem: true
|
||||
affinity:
|
||||
anti:
|
||||
type:
|
||||
|
Loading…
x
Reference in New Issue
Block a user