# node-exporter

The standalone node-exporter runs in `observability-agent` with the embedded
kube-prometheus-stack copy and kube-rbac-proxy disabled. It mounts only
`/proc`, `/sys`, and `/` from the node, all read-only, and exposes an internal
ClusterIP metrics Service on port `9100`.

Host network, PID, and IPC namespaces remain disabled by the platform security
contract. Consequently, network-namespace metrics are treated as a known
single-node visibility limitation rather than authoritative host-network data.