node-exporter: Make host mounts read only and set mount propagation

2020-10-02 17:29:20 +02:00
parent 9cbafdb812
commit eda75c7c39
2 changed files with 10 additions and 4 deletions
--- a/manifests/node-exporter-daemonset.yaml
+++ b/manifests/node-exporter-daemonset.yaml
@@ -36,11 +36,13 @@ spec:
            memory: 180Mi
        volumeMounts:
        - mountPath: /host/proc
+          mountPropagation: HostToContainer
          name: proc
-          readOnly: false
+          readOnly: true
        - mountPath: /host/sys
+          mountPropagation: HostToContainer
          name: sys
-          readOnly: false
+          readOnly: true
        - mountPath: /host/root
          mountPropagation: HostToContainer
          name: root