Put linter annotations back

castai · Aug 21, 2024 · 47abc21 · 47abc21
1 parent 0f15c7c
commit 47abc21
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/charts/gpu-metrics-exporter/templates/daemonset.yaml b/charts/gpu-metrics-exporter/templates/daemonset.yaml
@@ -5,6 +5,14 @@ metadata:
   namespace: {{ .Release.Namespace }}
   labels:
     {{- include "gpu-metrics-exporter.labels" . | nindent 4 }}
+  {{- if .Values.dcgmExporter.enabled }}
+  annotations:
+    ignore-check.kube-linter.io/privileged-container: "This daemon set needs to run DCGM Exporter as privileged to access the GPU metrics."
+    ignore-check.kube-linter.io/run-as-non-root: "This daemon set needs to run DCGM Exporter as root to access the GPU metrics."
+    ignore-check.kube-linter.io/privilege-escalation-container: "This daemon set needs escalate privileges for DCGM Exporter."
+    ignore-check.kube-linter.io/no-read-only-root-fs: "This daemon set needs to run DCGM Exporter with read-only root filesystem."
+    ignore-check.kube-linter.io/drop-net-raw-capability: "This daemon set needs to run DCGM Exporter with SYS_ADMIN."
+  {{- end }}
 spec:
   updateStrategy:
     type: RollingUpdate