platform-core/services/observability/node-exporter

node-exporter

The standalone node-exporter runs in observability-agent with the embedded kube-prometheus-stack copy and kube-rbac-proxy disabled. It mounts only /proc, /sys, and / from the node, all read-only, and exposes an internal ClusterIP metrics Service on port 9100.

Host network, PID, and IPC namespaces remain disabled by the platform security contract. Consequently, network-namespace metrics are treated as a known single-node visibility limitation rather than authoritative host-network data.