Skip to content
Snippets Groups Projects
Commit 98559a0f authored by ArthurSens's avatar ArthurSens
Browse files

Allow kube-state-metrics to run as any user

parent 1237843e
No related branches found
No related tags found
No related merge requests found
...@@ -160,9 +160,20 @@ local restrictedPodSecurityPolicy = { ...@@ -160,9 +160,20 @@ local restrictedPodSecurityPolicy = {
apiGroups: ['policy'], apiGroups: ['policy'],
resources: ['podsecuritypolicies'], resources: ['podsecuritypolicies'],
verbs: ['use'], verbs: ['use'],
resourceNames: [restrictedPodSecurityPolicy.metadata.name], resourceNames: ['kube-state-metrics-psp'],
}], }],
}, },
podSecurityPolicy: restrictedPodSecurityPolicy {
metadata+: {
name: 'kube-state-metrics-psp',
},
spec+: {
runAsUser: {
rule: 'RunAsAny',
},
},
},
}, },
nodeExporter+: { nodeExporter+: {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment