Merge pull request #1642 from wulfthimm/fix-node-exp-psp

added allowedCapabilities to node-exporter psp
2022-02-14 14:55:01 +00:00
parent 7c715c8126 a5c5adba68
commit 7612bc33cb
1 changed files with 3 additions and 0 deletions
--- a/jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
+++ b/jsonnet/kube-prometheus/addons/podsecuritypolicies.libsonnet
@@ -200,6 +200,9 @@ local restrictedPodSecurityPolicy = {
        name: 'node-exporter-psp',
      },
      spec+: {
+        allowedCapabilities: [
+          'SYS_TIME',
+        ],
        allowedHostPaths+: [
          {
            pathPrefix: '/proc',