prometheus operator v0.93.1
Prometheus.spec.arbitraryFSAccessThroughSMs.deny
deny prevents service monitors from accessing arbitrary files on the file system. When true, service monitors cannot use file-based configurations like BearerTokenFile that could potentially access sensitive files. When false (default), such access is allowed. Setting this to true enhances security by preventing potential credential theft attacks.
| Field / Type | Description |
|---|---|
Prometheus.spec.arbitraryFSAccessThroughSMs.deny | deny prevents service monitors from accessing arbitrary files on the file system. When true, service monitors cannot use file-based configurations like BearerTokenFile that could potentially access sensitive files. When false (default), such access is allowed. Setting this to true enhances security by preventing potential credential theft attacks. |