removed CAP_ from node-exporter daemonset

2022-02-16 14:41:20 +00:00
parent 5850e56501
commit 30bfd69c3e
2 changed files with 2 additions and 2 deletions
--- a/jsonnet/kube-prometheus/components/node-exporter.libsonnet
+++ b/jsonnet/kube-prometheus/components/node-exporter.libsonnet
@@ -185,7 +185,7 @@ function(params) {
      securityContext: {
        allowPrivilegeEscalation: false,
        readOnlyRootFilesystem: true,
-        capabilities: { drop: ['ALL'], add: ['CAP_SYS_TIME'] },
+        capabilities: { drop: ['ALL'], add: ['SYS_TIME'] },
      },
    };

--- a/manifests/nodeExporter-daemonset.yaml
+++ b/manifests/nodeExporter-daemonset.yaml
@@ -48,7 +48,7 @@ spec:
          allowPrivilegeEscalation: false
          capabilities:
            add:
-            - CAP_SYS_TIME
+            - SYS_TIME
            drop:
            - ALL
          readOnlyRootFilesystem: true