Merge pull request #1642 from wulfthimm/fix-node-exp-psp

added allowedCapabilities to node-exporter psp

Merge pull request #1642 from wulfthimm/fix-node-exp-psp
7612bc33 · Arthur Silva Sens · GitHub · 7c715c81 · a5c5adba · 7612bc33
Unverified Commit 7612bc33 authored 3 years ago by Arthur Silva Sens Committed by GitHub 3 years ago
--- a/jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
+++ b/jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
@@ -200,6 +200,9 @@ local restrictedPodSecurityPolicy = {
        name: 'node-exporter-psp',
      },
      spec+: {
+        allowedCapabilities: [
+          'SYS_TIME',
+        ],
        allowedHostPaths+: [
          {
            pathPrefix: '/proc',