Allow prometheus collectors write access to /var/lock

diff --git a/cookbooks/prometheus/resources/collector.rb b/cookbooks/prometheus/resources/collector.rb
index ef103c3c0733d778c7fe84d9a56b0aaffd12cf48..aa02f9d3499a7260dd2c36fde687021902c6c1a4 100644 (file)
--- a/cookbooks/prometheus/resources/collector.rb
+++ b/cookbooks/prometheus/resources/collector.rb
@@ -38,7 +38,7 @@ action :create do
     private_tmp true
     protect_system "strict"
     protect_home true
-    read_write_paths "/var/lib/prometheus/node-exporter"
+    read_write_paths ["/var/lib/prometheus/node-exporter", "/var/lock"]
     no_new_privileges true
   end