Rationale for Kubernetes privileges on node-exporter daemonset

[vszal]

Hello. Hoping to get some clarity on why the DaemonSet for Node Exporter needs such expansive privileges: https://github.com/prometheus-operator/kube-prometheus/blob/main/manifests/nodeExporter-daemonset.yaml

In particular, what are these used for?

• hostPID
• hostNetwork
• root hostMount

Especially the last one seems very loose. Is there anyway this could be scoped down to relevant mounts?

Thanks.