Skip to content

Commit ebc6cd8

Browse files
authored
Update README.md
1 parent 41b2997 commit ebc6cd8

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

terraform-provider-civo/k8s/talos/README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -76,12 +76,12 @@ Up to 10000 certificates can be issued per registered domain (i.e we used nip.io
7676
Failed to create Order: 429 urn:ietf:params:acme:error:rateLimited: too many certificates (10000) already issued for "nip.io"
7777
```
7878
## PodSecurity Restrictions fails node-exporter creation
79-
due to extra privilege necessary to create node exporter pods that scrape Hostnetwork and HostPID metrics , I had to add a label for cluster-tools namespace to make it work.
79+
due to [extra privilege necessary](https://kubernetes.io/docs/concepts/security/pod-security-policy/#run-another-pod) to create node exporter pods that scrape Hostnetwork and HostPID metrics , I had to add a label for cluster-tools namespace to make it work.
8080
```
8181
Error creating: pods "prometheus-prometheus-node-exporter-b6jmf" is forbidden: violates PodSecurity "baseline:latest": host namespaces (hostNetwork=true, hostPID=true), hostPath volumes (volumes "proc", "sys", "root"), hostPort (container "node-exporter" uses hostPort 9100)
8282
```
8383
**Namespace Pod Secuirity label**
84-
```
84+
```hcl
8585
resource "kubernetes_namespace" "cluster_tools" {
8686
metadata {
8787
name = var.cluster_tools_namespace

0 commit comments

Comments
 (0)