mirror of
https://github.com/bitnami/charts.git
synced 2026-08-10 14:15:55 +08:00
[bitnami/thanos] feat: ✨ 🔒 Add runAsGroup (#23995)
Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
@@ -35,4 +35,4 @@ maintainers:
|
||||
name: thanos
|
||||
sources:
|
||||
- https://github.com/bitnami/charts/tree/main/bitnami/thanos
|
||||
version: 13.2.2
|
||||
version: 13.3.0
|
||||
|
||||
@@ -166,6 +166,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate
|
||||
| `query.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `query.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `query.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `query.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||
| `query.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `query.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
| `query.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
@@ -335,6 +336,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate
|
||||
| `queryFrontend.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `queryFrontend.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `queryFrontend.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `queryFrontend.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||
| `queryFrontend.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `queryFrontend.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
| `queryFrontend.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
@@ -461,6 +463,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate
|
||||
| `bucketweb.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `bucketweb.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `bucketweb.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `bucketweb.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||
| `bucketweb.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `bucketweb.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
| `bucketweb.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
@@ -595,6 +598,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate
|
||||
| `compactor.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `compactor.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `compactor.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `compactor.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||
| `compactor.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `compactor.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
| `compactor.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
@@ -726,6 +730,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate
|
||||
| `storegateway.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `storegateway.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `storegateway.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `storegateway.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||
| `storegateway.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `storegateway.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
| `storegateway.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
@@ -888,6 +893,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate
|
||||
| `ruler.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `ruler.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `ruler.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `ruler.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||
| `ruler.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `ruler.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
| `ruler.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
@@ -1033,6 +1039,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate
|
||||
| `receive.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `receive.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `receive.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `receive.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||
| `receive.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `receive.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
| `receive.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
@@ -1167,6 +1174,7 @@ Check the section [Integrate Thanos with Prometheus and Alertmanager](#integrate
|
||||
| `receiveDistributor.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `receiveDistributor.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `nil` |
|
||||
| `receiveDistributor.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `receiveDistributor.containerSecurityContext.runAsGroup` | Set containers' Security Context runAsGroup | `1001` |
|
||||
| `receiveDistributor.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `receiveDistributor.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
| `receiveDistributor.containerSecurityContext.readOnlyRootFilesystem` | Set container's Security Context readOnlyRootFilesystem | `true` |
|
||||
|
||||
@@ -223,6 +223,7 @@ query:
|
||||
## @param query.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param query.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param query.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param query.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
|
||||
## @param query.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param query.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
## @param query.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
|
||||
@@ -234,6 +235,7 @@ query:
|
||||
enabled: true
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
@@ -982,6 +984,7 @@ queryFrontend:
|
||||
## @param queryFrontend.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param queryFrontend.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param queryFrontend.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param queryFrontend.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
|
||||
## @param queryFrontend.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param queryFrontend.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
## @param queryFrontend.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
|
||||
@@ -993,6 +996,7 @@ queryFrontend:
|
||||
enabled: true
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
@@ -1512,6 +1516,7 @@ bucketweb:
|
||||
## @param bucketweb.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param bucketweb.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param bucketweb.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param bucketweb.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
|
||||
## @param bucketweb.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param bucketweb.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
## @param bucketweb.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
|
||||
@@ -1523,6 +1528,7 @@ bucketweb:
|
||||
enabled: true
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
@@ -2044,6 +2050,7 @@ compactor:
|
||||
## @param compactor.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param compactor.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param compactor.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param compactor.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
|
||||
## @param compactor.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param compactor.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
## @param compactor.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
|
||||
@@ -2055,6 +2062,7 @@ compactor:
|
||||
enabled: true
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
@@ -2597,6 +2605,7 @@ storegateway:
|
||||
## @param storegateway.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param storegateway.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param storegateway.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param storegateway.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
|
||||
## @param storegateway.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param storegateway.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
## @param storegateway.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
|
||||
@@ -2608,6 +2617,7 @@ storegateway:
|
||||
enabled: true
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
@@ -3325,6 +3335,7 @@ ruler:
|
||||
## @param ruler.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param ruler.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param ruler.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param ruler.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
|
||||
## @param ruler.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param ruler.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
## @param ruler.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
|
||||
@@ -3336,6 +3347,7 @@ ruler:
|
||||
enabled: true
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
@@ -3919,6 +3931,7 @@ receive:
|
||||
## @param receive.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param receive.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param receive.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param receive.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
|
||||
## @param receive.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param receive.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
## @param receive.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
|
||||
@@ -3930,6 +3943,7 @@ receive:
|
||||
enabled: true
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
@@ -4468,6 +4482,7 @@ receiveDistributor:
|
||||
## @param receiveDistributor.containerSecurityContext.enabled Enabled containers' Security Context
|
||||
## @param receiveDistributor.containerSecurityContext.seLinuxOptions [object,nullable] Set SELinux options in container
|
||||
## @param receiveDistributor.containerSecurityContext.runAsUser Set containers' Security Context runAsUser
|
||||
## @param receiveDistributor.containerSecurityContext.runAsGroup Set containers' Security Context runAsGroup
|
||||
## @param receiveDistributor.containerSecurityContext.runAsNonRoot Set container's Security Context runAsNonRoot
|
||||
## @param receiveDistributor.containerSecurityContext.privileged Set container's Security Context privileged
|
||||
## @param receiveDistributor.containerSecurityContext.readOnlyRootFilesystem Set container's Security Context readOnlyRootFilesystem
|
||||
@@ -4479,6 +4494,7 @@ receiveDistributor:
|
||||
enabled: true
|
||||
seLinuxOptions: null
|
||||
runAsUser: 1001
|
||||
runAsGroup: 1001
|
||||
runAsNonRoot: true
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
|
||||
Reference in New Issue
Block a user