github/kubeshark
1
0
Fork 0
mirror of https://github.com/kubeshark/kubeshark.git synced 2025-07-07 13:29:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

start the pod with host network and privileged

Browse Source
This commit is contained in:
Roee Gadot 2021-04-29 08:13:10 +03:00
parent b01fe9c918
commit 8078eb3728
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
cli/kubernetes/provider.go
View File

@ -9,10 +9,10 @@ import (
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1" metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/watch" "k8s.io/apimachinery/pkg/watch"
"k8s.io/client-go/kubernetes" "k8s.io/client-go/kubernetes"
_ "k8s.io/client-go/plugin/pkg/client/auth/gcp"
_ "k8s.io/client-go/plugin/pkg/client/auth/azure" _ "k8s.io/client-go/plugin/pkg/client/auth/azure"
_ "k8s.io/client-go/plugin/pkg/client/auth/openstack" _ "k8s.io/client-go/plugin/pkg/client/auth/gcp"
_ "k8s.io/client-go/plugin/pkg/client/auth/oidc" _ "k8s.io/client-go/plugin/pkg/client/auth/oidc"
_ "k8s.io/client-go/plugin/pkg/client/auth/openstack"
restclient "k8s.io/client-go/rest" restclient "k8s.io/client-go/rest"
"k8s.io/client-go/tools/clientcmd" "k8s.io/client-go/tools/clientcmd"
_ "k8s.io/client-go/tools/portforward" _ "k8s.io/client-go/tools/portforward"
@ -71,17 +71,22 @@ func (provider *Provider) GetPods(ctx context.Context) {
} }
func (provider *Provider) CreatePod(ctx context.Context, podName string, podImage string) (*core.Pod, error) { func (provider *Provider) CreatePod(ctx context.Context, podName string, podImage string) (*core.Pod, error) {
privileged := true
pod := &core.Pod{ pod := &core.Pod{
ObjectMeta: metav1.ObjectMeta{ ObjectMeta: metav1.ObjectMeta{
Name: podName, Name: podName,
Namespace: provider.Namespace, Namespace: provider.Namespace,
}, },
Spec: core.PodSpec{ Spec: core.PodSpec{
HostNetwork: true, // very important to make passive tapper see traffic
Containers: []core.Container{ Containers: []core.Container{
{ {
Name: podName, Name: podName,
Image: podImage, Image: podImage,
ImagePullPolicy: core.PullAlways, ImagePullPolicy: core.PullAlways,
SecurityContext: &core.SecurityContext{
Privileged: &privileged, // must be privileged to get node level traffic
},
}, },
}, },
TerminationGracePeriodSeconds: new(int64), TerminationGracePeriodSeconds: new(int64),