Skip to content

Commit 597c8a4

Browse files
authored
fix(kube_prometheus_stack): set AppArmor to unconfined for node-exporter (#3493)
Signed-off-by: yaguang tang <yaguang.tang@vexxhost.com>
1 parent 673ae0c commit 597c8a4

File tree

1 file changed

+5
-0
lines changed
  • roles/kube_prometheus_stack/vars

1 file changed

+5
-0
lines changed

roles/kube_prometheus_stack/vars/main.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -606,6 +606,11 @@ _kube_prometheus_stack_helm_values:
606606
repository: "{{ atmosphere_images['prometheus_config_reloader'] | vexxhost.kubernetes.docker_image('path') }}"
607607
tag: "{{ atmosphere_images['prometheus_config_reloader'] | vexxhost.kubernetes.docker_image('tag') }}"
608608
prometheus-node-exporter:
609+
podAnnotations:
610+
container.apparmor.security.beta.kubernetes.io/node-exporter: unconfined
611+
securityContext:
612+
appArmorProfile:
613+
type: Unconfined
609614
image:
610615
registry: "{{ atmosphere_images['prometheus_node_exporter'] | vexxhost.kubernetes.docker_image('domain') }}"
611616
repository: "{{ atmosphere_images['prometheus_node_exporter'] | vexxhost.kubernetes.docker_image('path') }}"

0 commit comments

Comments
 (0)