Skip to content

Commit a430a12

Browse files
[stable/zed] fix(kube_prometheus_stack): set AppArmor to unconfined for node-exporter (#3532)
Signed-off-by: yaguang tang <yaguang.tang@vexxhost.com> Co-authored-by: yaguang tang <yaguang.tang@vexxhost.com>
1 parent 99ebb89 commit a430a12

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

  • roles/kube_prometheus_stack/vars

roles/kube_prometheus_stack/vars/main.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -595,6 +595,11 @@ _kube_prometheus_stack_helm_values:
595595
repository: "{{ atmosphere_images['prometheus_config_reloader'] | vexxhost.kubernetes.docker_image('path') }}"
596596
tag: "{{ atmosphere_images['prometheus_config_reloader'] | vexxhost.kubernetes.docker_image('tag') }}"
597597
prometheus-node-exporter:
598+
podAnnotations:
599+
container.apparmor.security.beta.kubernetes.io/node-exporter: unconfined
600+
securityContext:
601+
appArmorProfile:
602+
type: Unconfined
598603
image:
599604
registry: "{{ atmosphere_images['prometheus_node_exporter'] | vexxhost.kubernetes.docker_image('domain') }}"
600605
repository: "{{ atmosphere_images['prometheus_node_exporter'] | vexxhost.kubernetes.docker_image('path') }}"

0 commit comments

Comments
 (0)