From: Tom Hughes <tom@compton.nu>
Date: Sun, 24 Jul 2022 21:29:54 +0000 (+0100)
Subject: Allow prometheus collectors write access to /var/lock
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/6c29db42585e5d85627ec8ee9f3639b0f482caa4

Allow prometheus collectors write access to /var/lock
---

diff --git a/cookbooks/prometheus/resources/collector.rb b/cookbooks/prometheus/resources/collector.rb
index ef103c3c0..aa02f9d34 100644
--- a/cookbooks/prometheus/resources/collector.rb
+++ b/cookbooks/prometheus/resources/collector.rb
@@ -38,7 +38,7 @@ action :create do
     private_tmp true
     protect_system "strict"
     protect_home true
-    read_write_paths "/var/lib/prometheus/node-exporter"
+    read_write_paths ["/var/lib/prometheus/node-exporter", "/var/lock"]
     no_new_privileges true
   end