node-exporter: do not mount /proc as it is covered by hostPID

This commit is contained in:
paulfantom 2020-12-18 14:17:07 +01:00
parent 09ca49fce0
commit 41e3f7d03f
No known key found for this signature in database
GPG Key ID: 12AE0185401674E7

View File

@ -66,7 +66,6 @@
image: $._config.imageRepos.nodeExporter + ':' + $._config.versions.nodeExporter, image: $._config.imageRepos.nodeExporter + ':' + $._config.versions.nodeExporter,
args: [ args: [
'--web.listen-address=' + std.join(':', [$._config.nodeExporter.listenAddress, std.toString($._config.nodeExporter.port)]), '--web.listen-address=' + std.join(':', [$._config.nodeExporter.listenAddress, std.toString($._config.nodeExporter.port)]),
'--path.procfs=/host/proc',
'--path.sysfs=/host/sys', '--path.sysfs=/host/sys',
'--path.rootfs=/host/root', '--path.rootfs=/host/root',
'--no-collector.wifi', '--no-collector.wifi',
@ -74,7 +73,6 @@
'--collector.filesystem.ignored-mount-points=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)', '--collector.filesystem.ignored-mount-points=^/(dev|proc|sys|var/lib/docker/.+|var/lib/kubelet/pods/.+)($|/)',
], ],
volumeMounts: [ volumeMounts: [
{ name: 'proc', mountPath: '/host/proc', mountPropagation: 'HostToContainer', readOnly: true },
{ name: 'sys', mountPath: '/host/sys', mountPropagation: 'HostToContainer', readOnly: true }, { name: 'sys', mountPath: '/host/sys', mountPropagation: 'HostToContainer', readOnly: true },
{ name: 'root', mountPath: '/host/root', mountPropagation: 'HostToContainer', readOnly: true }, { name: 'root', mountPath: '/host/root', mountPropagation: 'HostToContainer', readOnly: true },
], ],
@ -135,7 +133,6 @@
}], }],
containers: [nodeExporter, proxy], containers: [nodeExporter, proxy],
volumes: [ volumes: [
{ name: 'proc', hostPath: { path: '/proc' } },
{ name: 'sys', hostPath: { path: '/sys' } }, { name: 'sys', hostPath: { path: '/sys' } },
{ name: 'root', hostPath: { path: '/' } }, { name: 'root', hostPath: { path: '/' } },
], ],