removed CAP_ from node-exporter daemonset

2025-08-24 16:01:43 +02:00 · 2022-02-16 14:41:20 +00:00 · 2022-02-16 14:41:20 +00:00 · 30bfd69c3e
commit 30bfd69c3e
parent 5850e56501
2 changed files with 2 additions and 2 deletions
--- a/jsonnet/kube-prometheus/components/node-exporter.libsonnet
+++ b/jsonnet/kube-prometheus/components/node-exporter.libsonnet
@ -185,7 +185,7 @@ function(params) {
      securityContext: {
        allowPrivilegeEscalation: false,
        readOnlyRootFilesystem: true,
-        capabilities: { drop: ['ALL'], add: ['CAP_SYS_TIME'] },
+        capabilities: { drop: ['ALL'], add: ['SYS_TIME'] },
      },
    };

--- a/manifests/nodeExporter-daemonset.yaml
+++ b/manifests/nodeExporter-daemonset.yaml
@ -48,7 +48,7 @@ spec:
          allowPrivilegeEscalation: false
          capabilities:
            add:
-            - CAP_SYS_TIME
+            - SYS_TIME
            drop:
            - ALL
          readOnlyRootFilesystem: true