manifests/grafana/deployment.yaml

@@ -12,25 +12,13 @@ spec:
       labels:
         app: grafana
     spec:
-      affinity:
-        podAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 100
-              podAffinityTerm:
-                labelSelector:
-                  matchExpressions:
-                    - key: cnpg.io/cluster
-                      operator: In
-                      values:
-                        - grafana-db
-                topologyKey: "kubernetes.io/hostname"
       securityContext:
         fsGroup: 472
         supplementalGroups:
           - 0
       containers:
         - name: grafana
-          image: grafana/grafana:12.0.0
+          image: grafana/grafana:11.6.0
           ports:
             - containerPort: 3000
           readinessProbe:

manifests/prometheus/prometheus.yaml

@@ -24,6 +24,7 @@ spec:
           requests:
             storage: 50Gi
   securityContext:
+    runAsNonRoot: true
     fsGroup: 2000
     runAsUser: 1000
   alerting:

manifests/promtail/daemonset.yaml

@@ -31,11 +31,11 @@ spec:
         - mountPath: /var/lib/docker/containers
           name: varlibdockercontainers
           readOnly: true
-      #tolerations:
+      tolerations:
-      #  - key: type
+        - key: type
-      #    operator: Equal
+          operator: Equal
-      #    value: services
+          value: services
-      #    effect: NoSchedule
+          effect: NoSchedule
       volumes:
       - name: logs
         hostPath: