You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Needed advice from community members. We have deployed Promotheus node-exporter 1.8.2 using helm in Microsoft Azure Kubernetes Service (AKS). Also during an assessment of our platform towards improved security & resilience angle received below recommendations from Microsoft experts to be implemented.
Containers sharing sensitive host namespaces should be avoided
Usage of host networking and ports should be restricted
Usage of pod HostPath volume mounts should be restricted to a known list to restrict node access from compromised containers
The root access inside the service container should be avoided.
We are not sure if above actions when implemented will have an impact on Promotheus node-exporter since we used default Promotheus node-exporter configs which are in helm chart for Promotheus node-exporter.
Could anyone from the community please help or guide us on below queries?
Have you tried implementing custom configs apart from default configs provided?
Do you have a view of the impact by any means if we go ahead and implement this?
Are there any other general recommendation towards achieving this?
The text was updated successfully, but these errors were encountered:
sairinraychoudhury
changed the title
Microsoft recommendations to improve security and resilience
Microsoft recommendations to improve security and resilience in the Node Exporter service
Sep 18, 2024
Needed advice from community members. We have deployed Promotheus node-exporter 1.8.2 using helm in Microsoft Azure Kubernetes Service (AKS). Also during an assessment of our platform towards improved security & resilience angle received below recommendations from Microsoft experts to be implemented.
We are not sure if above actions when implemented will have an impact on Promotheus node-exporter since we used default Promotheus node-exporter configs which are in helm chart for Promotheus node-exporter.
Could anyone from the community please help or guide us on below queries?
The text was updated successfully, but these errors were encountered: