[prometheus-adapter] Fix security context capabilities #3952
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
saikrishnagaddipati
requested review from
hectorj2f,
MattiasGees and
steven-sheehy
as code owners
saikrishnagaddipati
changed the title
zanhsieh
changed the title
|
@hectorj2f @MattiasGees @steven-sheehy this issue could apply to other helm charts which have security context listed as "all" instead of "ALL". |
steven-sheehy
requested changes
Nov 3, 2023
chart version bumped |
|
Please signoff all commits so DCO check passes |
This comment was marked as duplicate.
This comment was marked as duplicate.
Sorry, something went wrong.
This comment was marked as duplicate.
This comment was marked as duplicate.
Sorry, something went wrong.
This comment was marked as duplicate.
This comment was marked as duplicate.
Sorry, something went wrong.
this value should be in all CAPS as per spec https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted Exact same issue has been raise by @joe bowbeer argoproj/argo-cd#5786 (comment) Signed-off-by: Krishna <[email protected]>
…prometheus-community#3847) * bump stackdriver exporter to 0.14.1 Signed-off-by: drfaust92 <[email protected]> * bump stackdriver exporter to 0.14.1 Signed-off-by: drfaust92 <[email protected]> * Update Chart.yaml Signed-off-by: Ilia Lazebnik <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> Signed-off-by: Krishna <[email protected]>
Signed-off-by: Krishna <[email protected]>
saikrishnagaddipati
force-pushed
the
patch-1
branch
from
dfca9b9 to
d45168c
Compare
|
@steven-sheehy signed off commits and DCO passed. |
|
Need to bump the chart version again since another PR was merged |
Signed-off-by: Krishna <[email protected]>
saikrishnagaddipati
force-pushed
the
patch-1
branch
from
c751080 to
46eb32c
Compare
Signed-off-by: Krishna <[email protected]>
|
bumped the chart version to 4.8.1 and signed off |
steven-sheehy
approved these changes
Nov 8, 2023
sachasmart
pushed a commit
to sachasmart/helm-charts
that referenced
this pull request
Dec 14, 2023
…mmunity#3952) K8s Pod security standards capabilities should be all uppercase Signed-off-by: Krishna <[email protected]> Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> Co-authored-by: Ilia Lazebnik <[email protected]> Signed-off-by: Sacha <[email protected]>
sachasmart
added a commit
to sachasmart/helm-charts
that referenced
this pull request
Dec 14, 2023
* [kube-prometheus-stack] Allow to directory config prometheus.spec and alertmanager.spec Signed-off-by: Jan-Otto Kröpke <[email protected]> * Add tests Signed-off-by: Jan-Otto Kröpke <[email protected]> * Update charts/kube-prometheus-stack/values.yaml Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> --------- Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> pod security spec updates - Update to the podSpec in `_helpers.tpl` with `customPingGroupRange` and included sensible default for ping range - Update to the `deployment.yaml` to reflect updates Signed-off-by: Sacha <[email protected]> [prometheus] Allow setting automountServiceAccountToken (prometheus-community#3911) * Allow turning setting automountServiceAccountToken Signed-off-by: drfaust92 <[email protected]> * Allow turning setting automountServiceAccountToken Signed-off-by: drfaust92 <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-json-exporter] fix configmap name according to standard (prometheus-community#3926) Signed-off-by: t3mi <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus] Allow setting scrape_config_files in prometheus config (prometheus-community#3930) Signed-off-by: Roshan Jobanputra <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] fixes thanos configs (prometheus-community#3918) * break: kube-prom-stack thanos-ruler config secrets Signed-off-by: ThameezBo <[email protected]> * fix: linting Signed-off-by: ThameezBo <[email protected]> * fix: update README Signed-off-by: ThameezBo <[email protected]> * fix: linting Signed-off-by: ThameezBo <[email protected]> * fix: comments Signed-off-by: ThameezBo <[email protected]> * Update charts/kube-prometheus-stack/values.yaml Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: thameezb <[email protected]> * fix: cater for prom.promSpec.thanos Signed-off-by: ThameezBo <[email protected]> * fix: linting Signed-off-by: ThameezBo <[email protected]> * fix: cater for all three permutations Signed-off-by: ThameezBo <[email protected]> --------- Signed-off-by: ThameezBo <[email protected]> Signed-off-by: thameezb <[email protected]> Signed-off-by: thameezbo <[email protected]> Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus] Loosen typing for pdb.maxUnavailable (prometheus-community#3927) * Loosen PDB typing Signed-off-by: drfaust92 <[email protected]> * Loosen PDB typing Signed-off-by: drfaust92 <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: zeritti <[email protected]> Co-authored-by: zeritti <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Update Thanos with critical fixes for objstorage and HTTP/2 CVE (prometheus-community#3935) * [kube-prometheus-stack] Update Thanos Ruler with critical fixes for objstorage Signed-off-by: Dmitriy Alekseev <[email protected]> * Update values.yaml Signed-off-by: Dmitriy Alekseev <[email protected]> * Update values.yaml Signed-off-by: Dmitriy Alekseev <[email protected]> --------- Signed-off-by: Dmitriy Alekseev <[email protected]> Signed-off-by: Sacha <[email protected]> Populating dynamic honorLabels and honorTimestamps in kubelet ServiceMonitor (prometheus-community#3934) * Implementing dynamic honorLables and honorTimestamp in kubelet ServiceMonitor Signed-off-by: andrejshapal <[email protected]> * Updating values with default honorTimestamp and honorLables Signed-off-by: andrejshapal <[email protected]> * Bumping chart version Signed-off-by: andrejshapal <[email protected]> * Linting Signed-off-by: andrejshapal <[email protected]> * Linting Signed-off-by: andrejshapal <[email protected]> * Linting Signed-off-by: andrejshapal <[email protected]> * Update Chart.yaml Signed-off-by: andrejshapal <[email protected]> * Update charts/kube-prometheus-stack/Chart.yaml Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: andrejshapal <[email protected]> * Update charts/kube-prometheus-stack/Chart.yaml Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: andrejshapal <[email protected]> --------- Signed-off-by: andrejshapal <[email protected]> Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus] Upgrade Prometheus, update deps (prometheus-community#3947) * update deps Signed-off-by: drfaust92 <[email protected]> * Update charts/prometheus/Chart.yaml Co-authored-by: zeritti <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> * Update charts/prometheus/Chart.yaml Co-authored-by: zeritti <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> Co-authored-by: zeritti <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-stackdriver-exporter] bump stackdriver exporter to 0.14.1 (prometheus-community#3847) * bump stackdriver exporter to 0.14.1 Signed-off-by: drfaust92 <[email protected]> * bump stackdriver exporter to 0.14.1 Signed-off-by: drfaust92 <[email protected]> * Update Chart.yaml Signed-off-by: Ilia Lazebnik <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> Signed-off-by: Sacha <[email protected]> [CI] Fix linter job (prometheus-community#3962) Signed-off-by: Jan-Otto Kröpke <[email protected]> Co-authored-by: Ben Kochie <[email protected]> Signed-off-by: Sacha <[email protected]> [jiralert] Fix template error in ingress (prometheus-community#3936) Co-authored-by: MH <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-adapter] allow customize clusterrole resources (prometheus-community#3944) Allow end user to change cluster role resources in external and custom metrics Signed-off-by: Mao-Hsiang Lien <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-postgres-exporter] Upgrade postgres-exporter version (prometheus-community#3976) * [prometheus-postgres-exporter] Upgrade postgres-exporter version Signed-off-by: tukak <[email protected]> * [prometheus-postgres-exporter] Bump chart version Signed-off-by: tukak <[email protected]> --------- Signed-off-by: tukak <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-adapter] Fix security context capabilities (prometheus-community#3952) K8s Pod security standards capabilities should be all uppercase Signed-off-by: Krishna <[email protected]> Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> Co-authored-by: Ilia Lazebnik <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-state-metrics] Add http2 support on servicemonitor (prometheus-community#3955) Signed-off-by: nikhil bhat <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-state-metrics] Add templating support in ServiceMonitor labels/annotations (prometheus-community#3975) Signed-off-by: birca <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-memcached-exporter] Fix: allow to configure extra labels and annotations for the Service (prometheus-community#3943) Signed-off-by: R.Sicart <[email protected]> Signed-off-by: Sacha <[email protected]> Bump to 0.69.1 (prometheus-community#3990) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-operator-admission-webhook] Bump to 0.69.1 (prometheus-community#3989) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-pushgateway] Bump to 1.6.2 (prometheus-community#3995) * Bump to 1.6.2 Signed-off-by: drfaust92 <[email protected]> * Bump to 1.6.2 Signed-off-by: drfaust92 <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> Bump helm/chart-releaser-action from 1.5.0 to 1.6.0 (prometheus-community#3967) Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.5.0 to 1.6.0. - [Release notes](https://github.com/helm/chart-releaser-action/releases) - [Commits](helm/chart-releaser-action@v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: helm/chart-releaser-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ben Kochie <[email protected]> Signed-off-by: Sacha <[email protected]> Bump to 2.10.1 (prometheus-community#3996) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus] Bump deps (prometheus-community#3997) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus] Support retention size, attach volume labels to PVC (prometheus-community#3985) * Remove unused helper template prometheus.daemonset.apiVersion Signed-off-by: zeritti <[email protected]> * Attach labels to standalone PVC Signed-off-by: zeritti <[email protected]> * Minor corrections in comments Signed-off-by: zeritti <[email protected]> * Do not render resources unless set Signed-off-by: zeritti <[email protected]> * Update values schema Signed-off-by: zeritti <[email protected]> * Add support for data retention size Signed-off-by: zeritti <[email protected]> * Bump chart version Signed-off-by: zeritti <[email protected]> * Insert commonMetaLabels in values file Signed-off-by: zeritti <[email protected]> * Add header to values file Signed-off-by: zeritti <[email protected]> * Bump chart version Signed-off-by: zeritti <[email protected]> --------- Signed-off-by: zeritti <[email protected]> Co-authored-by: MH <[email protected]> Signed-off-by: Sacha <[email protected]> Bump to 0.69.1 (prometheus-community#3988) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Bump grafana and kube-state-metrics charts (prometheus-community#4000) * [kube-prometheus-stack] Bump grafana and kube-state-metrics charts Signed-off-by: Jan-Otto Kröpke <[email protected]> * fix readme Signed-off-by: Jan-Otto Kröpke <[email protected]> --------- Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Add missing RABC permission for Prometheus Operator (prometheus-community#4005) Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Sacha <[email protected]> Add priorityClassName, fix typePrefixes (prometheus-community#3932) Signed-off-by: Rimantas Ragainis <[email protected]> Co-authored-by: Rico Pahlisch <[email protected]> Signed-off-by: Sacha <[email protected]> Bump to 1.7.0 (prometheus-community#4012) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-blackbox-exporter] fix issue when set extra containers (prometheus-community#3850) * fix issue when set extra containers Signed-off-by: Allan Hung <[email protected]> * consistent indentation Signed-off-by: Allan Hung <[email protected]> --------- Signed-off-by: Allan Hung <[email protected]> Signed-off-by: allanhung <[email protected]> Co-authored-by: MH <[email protected]> Signed-off-by: Sacha <[email protected]> fix(prometheus-mysql-exporter): set serviceaccount lifecycle (prometheus-community#3949) Signed-off-by: Marcelo Clavel <[email protected]> Signed-off-by: Sacha <[email protected]> [blackbox] Allow helm values in extraArgs (prometheus-community#3937) Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: André Bauer <[email protected]> Co-authored-by: André Bauer <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-mysql-exporter] Support multiple target (prometheus-community#3751) * [prometheus-mysql-exporter]: multi-target probe support Signed-off-by: Remy Mollandin <[email protected]> * [prometheus-mysql-exporter]: updating value comments for targets structure Signed-off-by: Remy Mollandin <[email protected]> * [prometheus-mysql-exporter]: add default relabeling for multiple target Signed-off-by: Remy Mollandin <[email protected]> * feat(prometheus-mysql-exporter): modify values structure and now support shared credentials pattern Signed-off-by: Remy Mollandin <[email protected]> * [prometheus-mysql-exporter]: modify values comment Signed-off-by: Remy Mollandin <[email protected]> * chore: bump chart version to 2.2.0 Signed-off-by: Remy Mollandin <[email protected]> * docs: indent targets doc string Signed-off-by: Remy Mollandin <[email protected]> * Update charts/prometheus-mysql-exporter/values.yaml Signed-off-by: André Bauer <[email protected]> * Update charts/prometheus-mysql-exporter/values.yaml Signed-off-by: André Bauer <[email protected]> --------- Signed-off-by: Remy Mollandin <[email protected]> Signed-off-by: André Bauer <[email protected]> Co-authored-by: André Bauer <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Generate windows dashboard from hack/sync (prometheus-community#4013) Signed-off-by: Jan-Otto Kröpke <[email protected]> Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-blackbox-exporter] support podMonitoring CR for Google Ma… (prometheus-community#3959) * [prometheus-blackbox-exporter] support podMonitoring CR for Google Managed Prometheus Signed-off-by: Calvin Pham <[email protected]> * [prometheus-blackbox-exporter] remove version bump in README Signed-off-by: Calvin Pham <[email protected]> * [prometheus-blackbox-exporter] bump chart version Signed-off-by: Calvin Pham <[email protected]> --------- Signed-off-by: Calvin Pham <[email protected]> Co-authored-by: Calvin Pham <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-blackbox-exporter] add action=replace to metricsRelabelings (prometheus-community#3857) This (default) parameter is automatically added by k8s, causing the in-cluster object to differ from the manifest created by this chart. This discrepancy causes GitOps tooling to consider the resource out of date, as described in prometheus-community#3626 Signed-off-by: Alex Miller <[email protected]> Signed-off-by: André Bauer <[email protected]> Co-authored-by: André Bauer <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-adapter] Bump prom adapter to 0.11.2 (prometheus-community#4021) * Bump prom adapter to 0.11.2 Signed-off-by: drfaust92 <[email protected]> * Bump prom adapter to 0.11.2 Signed-off-by: drfaust92 <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-adapter] Only set priorityClassName if non-empty (prometheus-community#4026) Argo CD rejects the deployment when the priorityClassName key is present without a value. Signed-off-by: Ian Gudger <[email protected]> Signed-off-by: Sacha <[email protected]> [jiralert] add envFrom config (prometheus-community#4014) Signed-off-by: Sacha <[email protected]> [prometheus] automountServiceAccountToken to be configurable (prometheus-community#3998) Signed-off-by: Ian H. Lee <[email protected]> Signed-off-by: MH <[email protected]> Co-authored-by: MH <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-windows-exporter] add memory collector to windows-exporter values.yaml (prometheus-community#4028) Signed-off-by: Sacha <[email protected]> Bump prom to 2.48.0 (prometheus-community#4018) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: zeritti <[email protected]> Co-authored-by: zeritti <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Configure additional aggregation labels + k8s.rules split (prometheus-community#3883) * [kube-prometheus-stack] Configure additional aggregation labels Signed-off-by: Jan-Otto Kröpke <[email protected]> * Re-run sync Signed-off-by: Jan-Otto Kröpke <[email protected]> * Re-run sync Signed-off-by: Jan-Otto Kröpke <[email protected]> * Add new values for rules Signed-off-by: Jan-Otto Kröpke <[email protected]> * Add new values for rules Signed-off-by: Jan-Otto Kröpke <[email protected]> * Add new values for rules Signed-off-by: Jan-Otto Kröpke <[email protected]> * [kube-prometheus-stack] Fix names Signed-off-by: Jan-Otto Kröpke <[email protected]> * bump version Signed-off-by: Jan-Otto Kröpke <[email protected]> --------- Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Bump prom to 2.48.0 + node exporter dep (prometheus-community#4017) * Bump prom to 2.48.0 Signed-off-by: drfaust92 <[email protected]> * Bump prom to 2.48.0 Signed-off-by: drfaust92 <[email protected]> * Bump prom to 2.48.0 Signed-off-by: drfaust92 <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> Fixing configmaps Datasource when Prometheus Replicas and Exemplar Trace Id Destinations enabled (prometheus-community#4032) Signed-off-by: Wes Brown <[email protected]> Signed-off-by: Wes Brown <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-ipmi-exporter] Bump ipmi to 1.7.0 (prometheus-community#4022) * Bump ipmi to 1.7.0 Signed-off-by: drfaust92 <[email protected]> * Bump ipmi to 1.7.0 Signed-off-by: drfaust92 <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Co-authored-by: MH <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-adapter] - Added pod security policy specific annotations (prometheus-community#4035) Signed-off-by: James Neate <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-operator-crds] Bump crds to 0.70.0 (prometheus-community#4047) Signed-off-by: Sacha <[email protected]> [prometheus-operator-admission-webhook] Bump to 0.70.0 (prometheus-community#4048) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-operator-crds] Fix accidental space (prometheus-community#4049) Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Bump operator to 0.70.0 (prometheus-community#4046) Signed-off-by: Sacha <[email protected]> [prometheus] bump reloader to 0.70.0 (prometheus-community#4064) * bump reloader to 0.70.0 Signed-off-by: drfaust92 <[email protected]> * Update charts/prometheus/Chart.yaml Co-authored-by: MH <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> Co-authored-by: MH <[email protected]> Signed-off-by: Sacha <[email protected]> bump memcached to 0.14.1 (prometheus-community#4062) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-statsd-exporter] Bump to 0.26.0 (prometheus-community#3993) * Bump to 0.25.0 Signed-off-by: drfaust92 <[email protected]> * Update Chart.yaml Signed-off-by: Ilia Lazebnik <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> Signed-off-by: Sacha <[email protected]> [CI] Introduce CI CODEOWNER (prometheus-community#4019) * [CI] Introduce CI CODEOWNER Signed-off-by: Jan-Otto Kröpke <[email protected]> * [CI] Introduce CI CODEOWNER Signed-off-by: Jan-Otto Kröpke <[email protected]> * [CI] Add @GMartinez-Sisti Signed-off-by: Gabriel Martinez <[email protected]> --------- Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Gabriel Martinez <[email protected]> Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> [CI] Introduce interface for additional lint tasks (prometheus-community#3987) Signed-off-by: Jan-Otto Kröpke <[email protected]> Co-authored-by: Quentin Bisson <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-opencost-exporter] new OpenCost Prometheus exporter chart (prometheus-community#3872) * Initial commits Signed-off-by: Matt Ray <[email protected]> * Migrated over ServiceAccount from the opencost-helm-chart repo Signed-off-by: Matt Ray <[email protected]> * Imported ClusterRole and ClusterRoleBinding Signed-off-by: Matt Ray <[email protected]> * Add the Deployment from opencost-helm-chart Signed-off-by: Matt Ray <[email protected]> * Add the Service from opencost-helm-chart, edited for exporter-only Signed-off-by: Matt Ray <[email protected]> * Updated with recommendations from review and latest OpenCost release Signed-off-by: Matt Ray <[email protected]> * Updated to sync with upstream https://github.com/opencost/opencost-helm-chart Once that's merged it'll be the upstream to here. Signed-off-by: Matt Ray <[email protected]> * Updating the `home` field based on feedback and version bump Signed-off-by: Matt Ray <[email protected]> * fix url Signed-off-by: André Bauer <[email protected]> --------- Signed-off-by: Matt Ray <[email protected]> Signed-off-by: André Bauer <[email protected]> Co-authored-by: André Bauer <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-postgres-exporter] - introduced priorityClassName (prometheus-community#4069) * introduced priorityClassName Signed-off-by: Joachim Winkler <[email protected]> * add suggestions Signed-off-by: Joachim Winkler <[email protected]> * remove space Signed-off-by: Joachim Winkler <[email protected]> --------- Signed-off-by: Joachim Winkler <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Add custom CI actions (prometheus-community#4065) * [kube-prometheus-stack] Add custom CI actions Signed-off-by: Jan-Otto Kröpke <[email protected]> * Apply suggestions from code review Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> --------- Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> Co-authored-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Allow run Prometheus Operator Webhook receiver separately (prometheus-community#4023) * [kube-prometheus-stack] Allow run Prometheus Operator Webhook receiver separately Signed-off-by: Jan-Otto Kröpke <[email protected]> * [kube-prometheus-stack] unify hostnames Signed-off-by: Jan-Otto Kröpke <[email protected]> * Add PDB Signed-off-by: Jan-Otto Kröpke <[email protected]> * [kube-prometheus-stack] revert unify hostnames Signed-off-by: Jan-Otto Kröpke <[email protected]> * [kube-prometheus-stack] fix pdb Signed-off-by: Jan-Otto Kröpke <[email protected]> * [kube-prometheus-stack] add probes Signed-off-by: Jan-Otto Kröpke <[email protected]> * revert template calls Signed-off-by: Jan-Otto Kröpke <[email protected]> --------- Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Sacha <[email protected]> [CI] Run shellcheck on custom lint file (prometheus-community#4072) Signed-off-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> Bump actions/setup-python from 4 to 5 (prometheus-community#4079) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Shellcheck linter file (prometheus-community#4073) * [kube-prometheus-stack] Shellcheck linter file Signed-off-by: Gabriel Martinez <[email protected]> * bump chart Signed-off-by: Gabriel Martinez <[email protected]> --------- Signed-off-by: Gabriel Martinez <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Allow to define editable property on dashboards (prometheus-community#4024) * [kube-prometheus-stack] Allow to define editable property on dashboards Signed-off-by: Jan-Otto Kröpke <[email protected]> * resolve MR conflict Signed-off-by: Jan-Otto Kröpke <[email protected]> * Update Chart.yaml Signed-off-by: Jan-Otto Kröpke <[email protected]> --------- Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Jan-Otto Kröpke <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] Allow configuration of sessionAffinityConfig (prometheus-community#4076) * [kube-prometheus-stack] Allow configuration of sessionAffinityConfig Signed-off-by: karloramone <[email protected]> * [kube-prometheus-stack] Bump chart version to 55.2.0 Signed-off-by: karloramone <[email protected]> * [kube-prometheus-stack] Bump chart version to 55.3.0 Signed-off-by: karloramone <[email protected]> --------- Signed-off-by: karloramone <[email protected]> Signed-off-by: Karlo <[email protected]> Co-authored-by: Quentin Bisson <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] bump prometheus image tag to 2.48.1 (prometheus-community#4082) Signed-off-by: Lukas Monkevicius <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-json-exporter] feat: allow namespace override (prometheus-community#4067) Signed-off-by: t3mi <[email protected]> Co-authored-by: MH <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus] bump prom to 2.48.1 (prometheus-community#4083) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [kube-prometheus-stack] allow setting `GOGC` env configure (prometheus-community#4058) * add GOGC env setting Signed-off-by: dongjiang1989 <[email protected]> * fix lint checker Signed-off-by: dongjiang1989 <[email protected]> * fix value quote Signed-off-by: dongjiang1989 <[email protected]> * Update charts/kube-prometheus-stack/values.yaml Signed-off-by: dongjiang <[email protected]> * update chart version Signed-off-by: dongjiang1989 <[email protected]> * fix shellcheck lint Signed-off-by: dongjiang1989 <[email protected]> --------- Signed-off-by: dongjiang1989 <[email protected]> Signed-off-by: dongjiang <[email protected]> Signed-off-by: Sacha <[email protected]> bump mongo to 0.40 (prometheus-community#4084) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> [prometheus-fastly-exporter] Bump to 7.6.1 (prometheus-community#4002) * Bump to 7.6.1 Signed-off-by: drfaust92 <[email protected]> * fix chart app version Signed-off-by: drfaust92 <[email protected]> --------- Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> feat: bump prometheus-nats-exporter to 0.13.0 (prometheus-community#3956) Signed-off-by: Mikhail Naletov <[email protected]> Signed-off-by: Sacha <[email protected]> Bump to 1.5.0 (prometheus-community#3994) Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Sacha <[email protected]> fix(kube-prometheus-stack): re-enable memory working set rule (prometheus-community#4044) This rule was accidentally left out while migrating to the new layout for rules in release 54 Signed-off-by: Jan Jungnickel <[email protected]> Signed-off-by: Sacha <[email protected]>
Matiasmct
pushed a commit
to giffgaff/prometheus-charts-backup
that referenced
this pull request
Mar 20, 2024
…mmunity#3952) K8s Pod security standards capabilities should be all uppercase Signed-off-by: Krishna <[email protected]> Signed-off-by: drfaust92 <[email protected]> Signed-off-by: Ilia Lazebnik <[email protected]> Co-authored-by: Ilia Lazebnik <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
this value should be in all CAPS as per spec
https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted
Exact same issue has been raised by @joebowbeer
argoproj/argo-cd#5786 (comment)
This is my commit message
Signed-off-by: Sai Krishna Gaddipati [email protected]
What this PR does / why we need it
K8s Pod security standards capabilities should be all uppercase
Which issue this PR fixes
(optional, in
fixes #<issue number>(, fixes #<issue_number>, ...)format, will close that issue when PR gets merged)Special notes for your reviewer
Checklist
[prometheus-adapter])