mirrors/kube-prometheus
1
0
Fork 0
mirror of https://github.com/prometheus-operator/kube-prometheus.git synced 2025-08-30 19:01:22 +02:00
Code Issues Projects Releases Wiki Activity

Psp should be deployed at the same namespace as kube-prometheus stack

Browse Source 
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
This commit is contained in:
ArthurSens 2021-03-30 19:00:12 +00:00
parent f5f72e1b50
commit 069f95148f
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
View File

@ -59,6 +59,7 @@ local restrictedPodSecurityPolicy = {
kind: 'Role', kind: 'Role',
metadata: { metadata: {
name: 'alertmanager-' + $.values.alertmanager.name, name: 'alertmanager-' + $.values.alertmanager.name,
namespace: $.values.common.namespace,
}, },
rules: [{ rules: [{
apiGroups: ['policy'], apiGroups: ['policy'],
@ -73,6 +74,7 @@ local restrictedPodSecurityPolicy = {
kind: 'RoleBinding', kind: 'RoleBinding',
metadata: { metadata: {
name: 'alertmanager-' + $.values.alertmanager.name, name: 'alertmanager-' + $.values.alertmanager.name,
namespace: $.values.common.namespace,
}, },
roleRef: { roleRef: {
apiGroup: 'rbac.authorization.k8s.io', apiGroup: 'rbac.authorization.k8s.io',
@ -126,6 +128,7 @@ local restrictedPodSecurityPolicy = {
kind: 'Role', kind: 'Role',
metadata: { metadata: {
name: 'grafana', name: 'grafana',
namespace: $.values.common.namespace,
}, },
rules: [{ rules: [{
apiGroups: ['policy'], apiGroups: ['policy'],
@ -140,6 +143,7 @@ local restrictedPodSecurityPolicy = {
kind: 'RoleBinding', kind: 'RoleBinding',
metadata: { metadata: {
name: 'grafana', name: 'grafana',
namespace: $.values.common.namespace,
}, },
roleRef: { roleRef: {
apiGroup: 'rbac.authorization.k8s.io', apiGroup: 'rbac.authorization.k8s.io',