From e1fee3c4cd1ef1141c7604414757e07013acd4b9 Mon Sep 17 00:00:00 2001 From: Denis Patrakeev Date: Tue, 4 Mar 2025 13:44:42 +0300 Subject: [PATCH] [hotfix] fix config postgres_exporter 8 (!88) Co-authored-by: denis.patrakeev Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/88 --- .../postgres-exporter/values-override.yaml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml index d770eb8..fe1ccc2 100644 --- a/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml +++ b/clusters/k8s-avroid-office.prod.local/namespaces/cloud-prod/monitoring/postgres-exporter/values-override.yaml @@ -21,6 +21,14 @@ serviceAccount: # If not set and create is true, a name is generated using the fullname template name: vault +# The securityContext of the pod. +# See https://kubernetes.io/docs/concepts/policy/security-context/ for more. +podSecurityContext: [] + +# The securityContext of the container. +# See https://kubernetes.io/docs/concepts/policy/security-context/ for more. +securityContext: [] + config: ## The datasource properties on config are passed through helm tpl function. ## ref: https://helm.sh/docs/developing_charts/#using-the-tpl-function @@ -54,10 +62,6 @@ annotations: vault.security.banzaicloud.io/vault-role: "cloud-prod" vault.security.banzaicloud.io/vault-skip-verify: "false" vault.security.banzaicloud.io/vault-path: "avroid-office" - vault.security.banzaicloud.io/run-as-non-root: "true" - vault.security.banzaicloud.io/run-as-user: "1001" - vault.security.banzaicloud.io/run-as-group: "1001" - vault.security.banzaicloud.io/readonly-root-fs: "true" # Labels and annotations to attach to the deployment resource deployment: @@ -66,7 +70,3 @@ deployment: vault.security.banzaicloud.io/vault-role: "cloud-prod" vault.security.banzaicloud.io/vault-skip-verify: "false" vault.security.banzaicloud.io/vault-path: "avroid-office" - vault.security.banzaicloud.io/run-as-non-root: "true" - vault.security.banzaicloud.io/run-as-user: "1001" - vault.security.banzaicloud.io/run-as-group: "1001" - vault.security.banzaicloud.io/readonly-root-fs: "true"