Use the host's network namespace for scans

'hostNetwork: true' grants access to the host's sysctl configurations. 'dnsPolicy: ClusterFirstWithHostnet' is required to access services.
ComplianceAsCode · Mar 15, 2024 · a10228d · a10228d
1 parent 45fb1c6
commit a10228d
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/pkg/controller/compliancescan/scan.go b/pkg/controller/compliancescan/scan.go
@@ -289,6 +289,8 @@ func newScanPodForNode(scanInstance *compv1alpha1.ComplianceScan, node *corev1.N
 			NodeSelector: map[string]string{
 				corev1.LabelHostname: node.Labels[corev1.LabelHostname],
 			},
+			HostNetwork: true,
+			DNSPolicy: "ClusterFirstWithHostNet",
 			RestartPolicy: corev1.RestartPolicyOnFailure,
 			Volumes: []corev1.Volume{
 				{