From 0011046d93a73e736f7e87a8bd154d85a02818b9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Javier=20J=2E=20Salmer=C3=B3n-Garc=C3=ADa?= Date: Fri, 1 Mar 2024 20:25:07 +0100 Subject: [PATCH] [bitnami/thanos] feat: :sparkles: :lock: Add runAsGroup (#23995) Signed-off-by: Javier Salmeron Garcia --- bitnami/thanos/Chart.yaml | 2 +- bitnami/thanos/README.md | 8 ++++++++ bitnami/thanos/values.yaml | 16 ++++++++++++++++ 3 files changed, 25 insertions(+), 1 deletion(-) diff --git a/bitnami/thanos/Chart.yaml b/bitnami/thanos/Chart.yaml index e0526a0277..6dbb7fa027 100644 --- a/bitnami/thanos/Chart.yaml +++ b/bitnami/thanos/Chart.yaml @@ -35,4 +35,4 @@ maintainers: name: thanos sources: - https://github.com/bitnami/charts/tree/main/bitnami/thanos -version: 13.2.2 +version: 13.3.0 diff --git a/bitnami/thanos/README.md b/bitnami/thanos/README.md index 898d3db477..32758b9a0d 100644 --- a/bitnami/thanos/README.md +++ b/bitnami/thanos/README.md @@ -166,6 +166,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate | `query.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` | | `query.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` | | `query.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` | +| `query.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` | | `query.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` | | `query.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` | | `query.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` | @@ -335,6 +336,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate | `queryFrontend.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` | | `queryFrontend.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` | | `queryFrontend.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` | +| `queryFrontend.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` | | `queryFrontend.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` | | `queryFrontend.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` | | `queryFrontend.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` | @@ -461,6 +463,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate | `bucketweb.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` | | `bucketweb.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` | | `bucketweb.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` | +| `bucketweb.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` | | `bucketweb.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` | | `bucketweb.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` | | `bucketweb.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` | @@ -595,6 +598,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate | `compactor.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` | | `compactor.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` | | `compactor.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` | +| `compactor.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` | | `compactor.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` | | `compactor.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` | | `compactor.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` | @@ -726,6 +730,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate | `storegateway.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` | | `storegateway.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` | | `storegateway.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` | +| `storegateway.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` | | `storegateway.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` | | `storegateway.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` | | `storegateway.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` | @@ -888,6 +893,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate | `ruler.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` | | `ruler.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` | | `ruler.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` | +| `ruler.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` | | `ruler.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` | | `ruler.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` | | `ruler.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` | @@ -1033,6 +1039,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate | `receive.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` | | `receive.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` | | `receive.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` | +| `receive.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` | | `receive.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` | | `receive.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` | | `receive.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` | @@ -1167,6 +1174,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate | `receiveDistributor.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` | | `receiveDistributor.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` | | `receiveDistributor.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` | +| `receiveDistributor.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` | | `receiveDistributor.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` | | `receiveDistributor.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` | | `receiveDistributor.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` | diff --git a/bitnami/thanos/values.yaml b/bitnami/thanos/values.yaml index c98ecc1c17..526e292256 100644 --- a/bitnami/thanos/values.yaml +++ b/bitnami/thanos/values.yaml @@ -223,6 +223,7 @@ query: ## @param query.containerSecurityContext.enabled Enabled containers' Security Context ## @param query.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param query.containerSecurityContext.runAsUser Set containers' Security Context runAsUser + ## @param query.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param query.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param query.containerSecurityContext.privileged Set container's Security Context privileged ## @param query.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem @@ -234,6 +235,7 @@ query: enabled: true seLinuxOptions: null runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true @@ -982,6 +984,7 @@ queryFrontend: ## @param queryFrontend.containerSecurityContext.enabled Enabled containers' Security Context ## @param queryFrontend.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param queryFrontend.containerSecurityContext.runAsUser Set containers' Security Context runAsUser + ## @param queryFrontend.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param queryFrontend.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param queryFrontend.containerSecurityContext.privileged Set container's Security Context privileged ## @param queryFrontend.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem @@ -993,6 +996,7 @@ queryFrontend: enabled: true seLinuxOptions: null runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true @@ -1512,6 +1516,7 @@ bucketweb: ## @param bucketweb.containerSecurityContext.enabled Enabled containers' Security Context ## @param bucketweb.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param bucketweb.containerSecurityContext.runAsUser Set containers' Security Context runAsUser + ## @param bucketweb.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param bucketweb.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param bucketweb.containerSecurityContext.privileged Set container's Security Context privileged ## @param bucketweb.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem @@ -1523,6 +1528,7 @@ bucketweb: enabled: true seLinuxOptions: null runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true @@ -2044,6 +2050,7 @@ compactor: ## @param compactor.containerSecurityContext.enabled Enabled containers' Security Context ## @param compactor.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param compactor.containerSecurityContext.runAsUser Set containers' Security Context runAsUser + ## @param compactor.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param compactor.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param compactor.containerSecurityContext.privileged Set container's Security Context privileged ## @param compactor.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem @@ -2055,6 +2062,7 @@ compactor: enabled: true seLinuxOptions: null runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true @@ -2597,6 +2605,7 @@ storegateway: ## @param storegateway.containerSecurityContext.enabled Enabled containers' Security Context ## @param storegateway.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param storegateway.containerSecurityContext.runAsUser Set containers' Security Context runAsUser + ## @param storegateway.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param storegateway.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param storegateway.containerSecurityContext.privileged Set container's Security Context privileged ## @param storegateway.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem @@ -2608,6 +2617,7 @@ storegateway: enabled: true seLinuxOptions: null runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true @@ -3325,6 +3335,7 @@ ruler: ## @param ruler.containerSecurityContext.enabled Enabled containers' Security Context ## @param ruler.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param ruler.containerSecurityContext.runAsUser Set containers' Security Context runAsUser + ## @param ruler.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param ruler.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param ruler.containerSecurityContext.privileged Set container's Security Context privileged ## @param ruler.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem @@ -3336,6 +3347,7 @@ ruler: enabled: true seLinuxOptions: null runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true @@ -3919,6 +3931,7 @@ receive: ## @param receive.containerSecurityContext.enabled Enabled containers' Security Context ## @param receive.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param receive.containerSecurityContext.runAsUser Set containers' Security Context runAsUser + ## @param receive.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param receive.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param receive.containerSecurityContext.privileged Set container's Security Context privileged ## @param receive.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem @@ -3930,6 +3943,7 @@ receive: enabled: true seLinuxOptions: null runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true @@ -4468,6 +4482,7 @@ receiveDistributor: ## @param receiveDistributor.containerSecurityContext.enabled Enabled containers' Security Context ## @param receiveDistributor.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container ## @param receiveDistributor.containerSecurityContext.runAsUser Set containers' Security Context runAsUser + ## @param receiveDistributor.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup ## @param receiveDistributor.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot ## @param receiveDistributor.containerSecurityContext.privileged Set container's Security Context privileged ## @param receiveDistributor.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem @@ -4479,6 +4494,7 @@ receiveDistributor: enabled: true seLinuxOptions: null runAsUser: 1001 + runAsGroup: 1001 runAsNonRoot: true privileged: false readOnlyRootFilesystem: true