fix(prometheus): set monitoring ns privileged via managedNamespaceMetadata — node-exporter hostNetwork/hostPID/hostPath blocked by baseline PSS

2026-07-21 11:05:04 -07:00
parent 34e996475f
commit 88f8a764de
1 changed files with 5 additions and 0 deletions
@@ -100,6 +100,11 @@ spec:
    server: https://kubernetes.default.svc
    namespace: monitoring
  syncPolicy:
+    managedNamespaceMetadata:
+      # node-exporter needs hostNetwork/hostPID/hostPath/hostPort; blocked by
+      # default baseline PSS (DaemonSet created 0 pods, Prometheus STS stuck).
+      labels:
+        pod-security.kubernetes.io/enforce: privileged
    automated:
      prune: true
      selfHeal: true