feat(prometheus): Not run as root

manifests/grafana/deployment.yaml

@@ -12,13 +12,25 @@ spec:
       labels:
         app: grafana
     spec:
+      affinity:
+        podAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 100
+              podAffinityTerm:
+                labelSelector:
+                  matchExpressions:
+                    - key: cnpg.io/cluster
+                      operator: In
+                      values:
+                        - grafana-db
+                topologyKey: "kubernetes.io/hostname"
       securityContext:
         fsGroup: 472
         supplementalGroups:
           - 0
       containers:
         - name: grafana
-          image: grafana/grafana:11.6.0
+          image: grafana/grafana:12.0.0
           ports:
             - containerPort: 3000
           readinessProbe:

manifests/prometheus/prometheus.yaml

@@ -24,7 +24,6 @@ spec:
           requests:
             storage: 50Gi
   securityContext:
-    runAsNonRoot: true
     fsGroup: 2000
     runAsUser: 1000
   alerting:

manifests/promtail/daemonset.yaml

@@ -31,11 +31,11 @@ spec:
         - mountPath: /var/lib/docker/containers
           name: varlibdockercontainers
           readOnly: true
-      tolerations:
-        - key: type
-          operator: Equal
-          value: services
-          effect: NoSchedule
+      #tolerations:
+      #  - key: type
+      #    operator: Equal
+      #    value: services
+      #    effect: NoSchedule
       volumes:
       - name: logs
         hostPath: