16214 SEC Allow to configure cadvisor /var/run to be read-only

You can now configure /var/run, which is mounted in cadvisor to be readOnly. This is a prerequisite for running the Kubernetes collectors in Google Kubernetes Engine Autopilot. Change-Id: Ic7d40344c767f2ce248cc1ca3bb44583d3c82de4
Checkmk · Nov 6, 2023 · 3c90d9b · 3c90d9b
1 parent 9866db4
commit 3c90d9b
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.werks/16214 b/.werks/16214
@@ -0,0 +1,14 @@
+Title: Allow to configure cadvisor /var/run to be read-only
+Class: security
+Compatible: compat
+Component: helm
+Date: 1699274046
+Edition: cre
+Knowledge: doc
+Level: 1
+State: unknown
+Version: 1.5.0
+
+You can now configure /var/run, which is mounted in cadvisor to be readOnly.
+This is a prerequisite for running the Kubernetes collectors in Google
+Kubernetes Engine Autopilot.