From: Tom Hughes <tom@compton.nu>
Date: Sun, 24 Jul 2022 21:37:27 +0000 (+0100)
Subject: Allow prometheus collectors write access to /var/log
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/85b1552114bd1cecf242caffcd4015500675bf9e?hp=6c29db42585e5d85627ec8ee9f3639b0f482caa4

Allow prometheus collectors write access to /var/log
---

diff --git a/cookbooks/prometheus/resources/collector.rb b/cookbooks/prometheus/resources/collector.rb
index aa02f9d34..e82984b14 100644
--- a/cookbooks/prometheus/resources/collector.rb
+++ b/cookbooks/prometheus/resources/collector.rb
@@ -38,7 +38,7 @@ action :create do
     private_tmp true
     protect_system "strict"
     protect_home true
-    read_write_paths ["/var/lib/prometheus/node-exporter", "/var/lock"]
+    read_write_paths ["/var/lib/prometheus/node-exporter", "/var/lock", "/var/log"]
     no_new_privileges true
   end