Feedback on Detected Misconfigurations

[zyue110026]

Greetings,

We are some security researchers who have built a scanner to detect configurations that can be used to conduct attacks for Kubernetes pods. For your repository, we have found a few misconfigurations in the following locations:

Misconfiguration name: TRUE_HOST_PID
Location-1:

CloudFlix/monitor/kubernetes-prometheus/manifests/prometheus/node-exporter/daemonset.yaml

Line 26 in e29eaee

hostPID: true

Misconfiguration name: TRUE_HOST_NET
Location-2:

CloudFlix/monitor/kubernetes-prometheus/manifests/prometheus/node-exporter/daemonset.yaml

Line 25 in e29eaee

hostNetwork: true

Please give us feedback. Do you think these are valid instances of misconfigurations? Will you fix them?