mirrors/kube-prometheus
1
0
Fork 0
mirror of https://github.com/prometheus-operator/kube-prometheus.git synced 2025-08-24 16:01:43 +02:00
Code Issues Projects Releases Wiki Activity

removed CAP_ from node-exporter daemonset

Browse Source
This commit is contained in:
Wulf Thimm 2022-02-16 14:41:20 +00:00
parent 5850e56501
commit 30bfd69c3e
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
jsonnet/kube-prometheus/components/node-exporter.libsonnet
View File

@ -185,7 +185,7 @@ function(params) {
securityContext: { securityContext: {
allowPrivilegeEscalation: false, allowPrivilegeEscalation: false,
readOnlyRootFilesystem: true, readOnlyRootFilesystem: true,
capabilities: { drop: ['ALL'], add: ['CAP_SYS_TIME'] }, capabilities: { drop: ['ALL'], add: ['SYS_TIME'] },
}, },
}; };

2
manifests/nodeExporter-daemonset.yaml
View File

@ -48,7 +48,7 @@ spec:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
add: add:
- CAP_SYS_TIME - SYS_TIME
drop: drop:
- ALL - ALL
readOnlyRootFilesystem: true readOnlyRootFilesystem: true