Skip to content

Allow enabling user namespaces in Prometheus(Agent)/Alertmanager/ThanosRuler pods #7758

@sebhoss

Description

@sebhoss

Component(s)

  • prometheus-operator
  • Prometheus CR

What is missing? Please describe.

Since Kubernetes 1.33 we can now enable user namespaces which greatly increases the security of a cluster. It would be great if both the operator itself would set hostUsers to false to enable this and allow configuring this field in all managed Prometheus custom resources.

Describe alternatives you've considered.

We currently apply a patch on top of the operator bundle.yaml file and have no solution for Prometheus resources.

Environment Information.

Environment

Kubernetes Version: 1.33.2
Prometheus-Operator Version: 0.84.0

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions