Allow kube-state-metrics to run as any user
Signed-off-by: ArthurSens <arthursens2005@gmail.com>
This commit is contained in:
@@ -160,9 +160,20 @@ local restrictedPodSecurityPolicy = {
|
|||||||
apiGroups: ['policy'],
|
apiGroups: ['policy'],
|
||||||
resources: ['podsecuritypolicies'],
|
resources: ['podsecuritypolicies'],
|
||||||
verbs: ['use'],
|
verbs: ['use'],
|
||||||
resourceNames: [restrictedPodSecurityPolicy.metadata.name],
|
resourceNames: ['kube-state-metrics-psp'],
|
||||||
}],
|
}],
|
||||||
},
|
},
|
||||||
|
|
||||||
|
podSecurityPolicy: restrictedPodSecurityPolicy {
|
||||||
|
metadata+: {
|
||||||
|
name: 'kube-state-metrics-psp',
|
||||||
|
},
|
||||||
|
spec+: {
|
||||||
|
runAsUser: {
|
||||||
|
rule: 'RunAsAny',
|
||||||
|
},
|
||||||
|
},
|
||||||
|
},
|
||||||
},
|
},
|
||||||
|
|
||||||
nodeExporter+: {
|
nodeExporter+: {
|
||||||
|
|||||||
Reference in New Issue
Block a user