Tighten permissions

castai · Apr 12, 2024 · 2ac1ea4 · 2ac1ea4
1 parent 77a9cb2
commit 2ac1ea4
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/charts/gpu-metrics-exporter/templates/daemonset.yaml b/charts/gpu-metrics-exporter/templates/daemonset.yaml
@@ -2,6 +2,7 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   name: {{ include "gpu-metrics-exporter.fullname" . }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "gpu-metrics-exporter.labels" . | nindent 4 }}
 spec:

diff --git a/charts/gpu-metrics-exporter/values.yaml b/charts/gpu-metrics-exporter/values.yaml
@@ -44,5 +44,3 @@ dcgmExporter:
   securityContext:
     privileged: true
     readOnlyRootFilesystem: true
-    allowPrivilegeEscalation: false
-    runAsNonRoot: true
diff --git a/kube-linter-config.yaml b/kube-linter-config.yaml
@@ -2,4 +2,5 @@ checks:
   exclude:
     - "unset-cpu-requirements"
     - "unset-memory-requirements"
-    - "privilege-escalation-container"
+    - "privileged-container"
+    - "run-as-non-root"