Mirrors/rpi.carlosedp.cluster-monitoring
1
0
Fork 0
mirror of https://github.com/carlosedp/cluster-monitoring.git synced 2025-08-27 13:46:16 +02:00
Code Issues Projects Releases Wiki Activity

Potential Denial of Service via unrestricted CPU/memory and root user execution (#187)

Browse Source 
* Update node-exporter-daemonset.yaml

* Update prometheus-adapter-deployment.yaml

Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com>

* Update prometheus-adapter-deployment.yaml

* Update prometheus-adapter-deployment.yaml

Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com>

* Update node-exporter-daemonset.yaml

---------

Signed-off-by: zyue110026 <98426905+zyue110026@users.noreply.github.com>
This commit is contained in:
zyue110026 2025-08-22 17:59:09 -05:00 committed by GitHub
parent 628b1ad6a9
commit 4ad94a898d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
manifests/prometheus-adapter-deployment.yaml
View File

@ -29,6 +29,17 @@ spec:
name: prometheus-adapter
ports:
- containerPort: 6443
resources:
requests:
memory: "256Mi"
cpu: "250m"
limits:
memory: "512Mi"
cpu: "500m"
securityContext:
runAsUser: 1000
runAsNonRoot: true
readOnlyRootFilesystem: true
volumeMounts:
- mountPath: /tmp
name: tmpfs