This commit is contained in:
Daniel
2025-08-20 07:55:56 +02:00

View File

@@ -25,7 +25,7 @@ spec:
service: service:
type: ClusterIP type: ClusterIP
port: 80 servicePort: 80
persistentVolume: persistentVolume:
enabled: true enabled: true
@@ -41,7 +41,16 @@ spec:
memory: 128Mi memory: 128Mi
prometheus-node-exporter: prometheus-node-exporter:
enabled: false enabled: true
containerSecurityContext:
allowPrivilegeEscalation: true
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 65534
runAsGroup: 65534
capabilities:
drop:
- ALL
kubeStateMetrics: kubeStateMetrics:
enabled: true enabled: true
@@ -81,7 +90,7 @@ spec:
namespace: prometheus namespace: prometheus
syncPolicy: syncPolicy:
anagedNamespaceMetadata: managedNamespaceMetadata:
labels: labels:
pod-security.kubernetes.io/enforce: privileged pod-security.kubernetes.io/enforce: privileged
pod-security.kubernetes.io/audit: privileged pod-security.kubernetes.io/audit: privileged