Skip to content
Snippets Groups Projects
Commit 30bfd69c authored by Wulf Thimm's avatar Wulf Thimm
Browse files

removed CAP_ from node-exporter daemonset

parent 5850e565
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
jsonnet/kube-prometheus/components/node-exporter.libsonnet
+ 1
− 1
View file @ 30bfd69c
...@@ -185,7 +185,7 @@ function(params) { ...@@ -185,7 +185,7 @@ function(params) {
securityContext: { securityContext: {
allowPrivilegeEscalation: false, allowPrivilegeEscalation: false,
readOnlyRootFilesystem: true, readOnlyRootFilesystem: true,
capabilities: { drop: ['ALL'], add: ['CAP_SYS_TIME'] }, capabilities: { drop: ['ALL'], add: ['SYS_TIME'] },
}, },
}; };
......
manifests/nodeExporter-daemonset.yaml
+ 1
− 1
View file @ 30bfd69c
...@@ -48,7 +48,7 @@ spec: ...@@ -48,7 +48,7 @@ spec:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
add: add:
- CAP_SYS_TIME - SYS_TIME
drop: drop:
- ALL - ALL
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
......
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment