From 15d586d57450b197a901e07f48e6558bcbf30b9c Mon Sep 17 00:00:00 2001 From: Craig Date: Tue, 29 Oct 2019 18:48:03 +0100 Subject: [PATCH] Don't use hostPort or hostNetwork (#56) There is no need to use a hostPort or the hostNetwork; avoiding hostPort allocation improves compatibility with other cluster monitoring and avoiding hostNetwork ensures public-facing clusters don't have an exploitable ports. --- app/manifests/metrics/10-node-exporter-ds.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/app/manifests/metrics/10-node-exporter-ds.yml b/app/manifests/metrics/10-node-exporter-ds.yml index 240f8ec610..404e48916d 100644 --- a/app/manifests/metrics/10-node-exporter-ds.yml +++ b/app/manifests/metrics/10-node-exporter-ds.yml @@ -25,7 +25,6 @@ spec: securityContext: runAsNonRoot: true runAsUser: 65534 - hostNetwork: true hostPID: true containers: - name: node-exporter @@ -39,7 +38,6 @@ spec: ports: - name: metrics containerPort: 9100 - hostPort: 9100 resources: requests: cpu: 10m