added allowedCapabilities to node-exporter psp

2025-08-26 00:42:09 +02:00 · 2022-02-14 14:38:13 +00:00 · 2022-02-14 14:38:13 +00:00 · a5c5adba68
commit a5c5adba68
parent 7c715c8126
1 changed files with 3 additions and 0 deletions
--- a/jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
+++ b/jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
@ -200,6 +200,9 @@ local restrictedPodSecurityPolicy = {
        name: 'node-exporter-psp',
      },
      spec+: {
+        allowedCapabilities: [
+          'SYS_TIME',
+        ],
        allowedHostPaths+: [
          {
            pathPrefix: '/proc',