mirrors/kube-prometheus
1
0
Fork 0
mirror of https://github.com/prometheus-operator/kube-prometheus.git synced 2025-10-30 23:51:01 +01:00
Code Issues Projects Releases Wiki Activity

Merge pull request #1647 from wulfthimm/wth/fix-node-exp

Browse Source 
Removed CAP_ from node-exporter daemonset
This commit is contained in:
Arthur Silva Sens 2022-02-16 14:53:11 +00:00 committed by GitHub
commit 3f1323dae8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
jsonnet/kube-prometheus/components/node-exporter.libsonnet
View File

@ -185,7 +185,7 @@ function(params) {
securityContext: { securityContext: {
allowPrivilegeEscalation: false, allowPrivilegeEscalation: false,
readOnlyRootFilesystem: true, readOnlyRootFilesystem: true,
capabilities: { drop: ['ALL'], add: ['CAP_SYS_TIME'] }, capabilities: { drop: ['ALL'], add: ['SYS_TIME'] },
}, },
}; };

2
manifests/nodeExporter-daemonset.yaml
View File

@ -48,7 +48,7 @@ spec:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
add: add:
- CAP_SYS_TIME - SYS_TIME
drop: drop:
- ALL - ALL
readOnlyRootFilesystem: true readOnlyRootFilesystem: true