diff --git a/deploy/charts/checkmk/templates/node-collector-container-metrics-ds.yaml b/deploy/charts/checkmk/templates/node-collector-container-metrics-ds.yaml index 052b62f..0fb2278 100644 --- a/deploy/charts/checkmk/templates/node-collector-container-metrics-ds.yaml +++ b/deploy/charts/checkmk/templates/node-collector-container-metrics-ds.yaml @@ -81,7 +81,7 @@ spec: readOnly: true - name: var-run mountPath: /var/run - {{- if .Values.nodeCollector.cadvisor.volumeMountPermissions.var_run.readOnly }} + {{- if .Values.gkeAutopilot.enabled }} readOnly: true {{- end }} - name: sys diff --git a/deploy/charts/checkmk/values.yaml b/deploy/charts/checkmk/values.yaml index 28711a1..f3d75da 100644 --- a/deploy/charts/checkmk/values.yaml +++ b/deploy/charts/checkmk/values.yaml @@ -13,7 +13,7 @@ kubeVersionOverride: "" ## GKE Autopilot only allows privilegded workloads, if they are allowlisted. ## Requirement: Please first deploy the allowlist-synchronizer CRD [https://github.com/checkmk/checkmk_kube_agent/tree/main/deploy/manifests/gke-allowlist/cmk-allowlist-synchronizer.yaml] ## More info: https://cloud.google.com/kubernetes-engine/docs/how-to/run-autopilot-partner-workloads -## To deploy in GKE Autopilot, please set to true. +## To deploy in GKE Autopilot, please set to true. This will adapt the workloads to the specific requirements of GKE Autopilot. gkeAutopilot: enabled: false @@ -223,11 +223,6 @@ nodeCollector: - "--allow_dynamic_housekeeping=true" - "--storage_duration=1m0s" - # For Google Kubernetes Engine (GKE) Autopilot, the readOnly needs to be set to true - volumeMountPermissions: - var_run: - readOnly: false - securityContext: seccompProfile: type: RuntimeDefault