Allow prometheus collectors write access to /var/log

diff --git a/cookbooks/prometheus/resources/collector.rb b/cookbooks/prometheus/resources/collector.rb
index aa02f9d3499a7260dd2c36fde687021902c6c1a4..e82984b143354b45326bb12d47eb71c51d1fed8b 100644 (file)
--- a/cookbooks/prometheus/resources/collector.rb
+++ b/cookbooks/prometheus/resources/collector.rb
@@ -38,7 +38,7 @@ action :create do
     private_tmp true
     protect_system "strict"
     protect_home true
-    read_write_paths ["/var/lib/prometheus/node-exporter", "/var/lock"]
+    read_write_paths ["/var/lib/prometheus/node-exporter", "/var/lock", "/var/log"]
     no_new_privileges true
   end