node-exporter: Make host mounts read only and set mount propagation

This commit is contained in:
Frederic Branczyk committed 2020-10-02 17:29:20 +02:00
1 parent 9cbafdb812
commit eda75c7c39
2 files changed
+10 -4

No files matched your search

+4 -2
View File
@@ -36,11 +36,13 @@ spec:
memory: 180Mi
volumeMounts:
- mountPath: /host/proc
mountPropagation: HostToContainer
name: proc
readOnly: false
readOnly: true
- mountPath: /host/sys
mountPropagation: HostToContainer
name: sys
readOnly: false
readOnly: true
- mountPath: /host/root
mountPropagation: HostToContainer
name: root