Anyone have any tips on how to make a containerized Prometheus node_exporter (run as a DaemonSet in k8s) to work well with CoreOS with SELinux enabled
Added selinux
Added container
What kind of issues are you having? You will likely have to run the DaemonSet as a privileged container to get access to all the information from the host.
Lots of permission denied by SELinux when trying to do things like access file systems under /host/proc. I was really hoping there was a pre-made policy somewhere for it a la what it seem Gentoo has (https://packages.gentoo.org/packages/sec-policy/selinux-node_exporter) so that I don’t have to use a privileged pod.