removed CAP_ from node-exporter daemonset

2022-02-16 14:41:20 +00:00
parent 5850e56501
commit 30bfd69c3e
2 changed files with 2 additions and 2 deletions
--- a/jsonnet/kube-prometheus/components/node-exporter.libsonnet
+++ b/jsonnet/kube-prometheus/components/node-exporter.libsonnet
@@ -185,7 +185,7 @@ function(params) {
      securityContext: {
        allowPrivilegeEscalation: false,
        readOnlyRootFilesystem: true,
-        capabilities: { drop: ['ALL'], add: ['CAP_SYS_TIME'] },
+        capabilities: { drop: ['ALL'], add: ['SYS_TIME'] },
      },
    };