From befd3a5952ec26c8d1f1da253d2aaf3360dd663f Mon Sep 17 00:00:00 2001 From: Denis Patrakeev Date: Tue, 4 Mar 2025 13:09:30 +0300 Subject: [PATCH] [hotfix] fix config postgres_exporter 6 (!85) Co-authored-by: denis.patrakeev Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/85 --- .../argocd-apps-postgres-exporter-secret.yaml | 3 +++ .../monitoring/postgres-exporter/values-override.yaml | 6 ++++++ 2 files changed, 9 insertions(+) diff --git a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/argocd-apps-postgres-exporter-secret.yaml b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/argocd-apps-postgres-exporter-secret.yaml index d18ce6d..1651271 100644 --- a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/argocd-apps-postgres-exporter-secret.yaml +++ b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/argocd-apps-postgres-exporter-secret.yaml @@ -11,6 +11,9 @@ metadata: vault.security.banzaicloud.io/vault-role: "cloud-prod" vault.security.banzaicloud.io/vault-skip-verify: "false" vault.security.banzaicloud.io/vault-path: "avroid-office" + vault.security.banzaicloud.io/run-as-non-root: "true" + vault.security.banzaicloud.io/run-as-user: "1001" + vault.security.banzaicloud.io/run-as-group: "1001" type: Opaque data: username: dmF1bHQ6dGVhbS1kZXZvcHMvZGF0YS9zZXJ2aWNlcy9tb25pdG9yaW5nL2s4cy9jbG91ZC1wcm9kL3Bvc3RncmVzLWV4cG9ydGVyI3VzZXJuYW1lCg== diff --git a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml index c754017..30434a7 100644 --- a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml +++ b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml @@ -54,6 +54,9 @@ annotations: vault.security.banzaicloud.io/vault-role: "cloud-prod" vault.security.banzaicloud.io/vault-skip-verify: "false" vault.security.banzaicloud.io/vault-path: "avroid-office" + vault.security.banzaicloud.io/run-as-non-root: "true" + vault.security.banzaicloud.io/run-as-user: "1001" + vault.security.banzaicloud.io/run-as-group: "1001" # Labels and annotations to attach to the deployment resource deployment: @@ -62,3 +65,6 @@ deployment: vault.security.banzaicloud.io/vault-role: "cloud-prod" vault.security.banzaicloud.io/vault-skip-verify: "false" vault.security.banzaicloud.io/vault-path: "avroid-office" + vault.security.banzaicloud.io/run-as-non-root: "true" + vault.security.banzaicloud.io/run-as-user: "1001" + vault.security.banzaicloud.io/run-as-group: "1001"