hostnetwork=false

Signed-off-by: Shreyas220 <[email protected]>
kubearmor · Aug 29, 2023 · 0631ac6 · 0631ac6
1 parent 49939f4
commit 0631ac6
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/deployments/generic/kubearmor.yaml b/deployments/generic/kubearmor.yaml
@@ -2721,7 +2721,7 @@ spec:
           name: docker-storage-path
           readOnly: true
       dnsPolicy: ClusterFirstWithHostNet
-      hostNetwork: true
+      hostNetwork: false
       hostPID: true
       initContainers:
       - image: kubearmor/kubearmor-init:stable

diff --git a/pkg/KubeArmorOperator/internal/controller/resources.go b/pkg/KubeArmorOperator/internal/controller/resources.go
@@ -77,7 +77,10 @@ func generateDaemonset(name, enforcer, runtime, socket, runtimeStorage, btfPrese
 	daemonset.Spec.Template.Spec.InitContainers[0].Image = common.KubeArmorInitImage
 	daemonset.Spec.Template.Spec.InitContainers[0].ImagePullPolicy = corev1.PullPolicy(common.KubeArmorInitImagePullPolicy)
 
+	daemonset.Spec.Template.Spec.HostNetwork = false
+
 	daemonset = addOwnership(daemonset).(*appsv1.DaemonSet)
+
 	fmt.Printf("generated daemonset: %v", daemonset)
 	return daemonset
 }