neew values

2025-08-19 10:12:52 +02:00
parent c79cfb8c6a
commit 07e07e7941
1 changed files with 16 additions and 0 deletions
--- a/argocd/apps/prometheus/prometheus.yaml
+++ b/argocd/apps/prometheus/prometheus.yaml
@@ -61,6 +61,22 @@ spec:
          enabled: true
          service:
            type: ClusterIP
+          securityContext:
+            runAsNonRoot: true
+            runAsUser: 65534
+            runAsGroup: 65534
+            fsGroup: 65534
+            seccompProfile:
+              type: RuntimeDefault
+          containerSecurityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 65534
+            runAsGroup: 65534
+            capabilities:
+              drop:
+                - ALL
  
  destination:
    server: https://kubernetes.default.svc