linkerd
/
linkerd2
mirror of https://github.com/linkerd/linkerd2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Removed hostNetwork: true from linkerd-cni Helm chart templates (#11158) 

Problem - Current does Linkerd CNI Helm chart templates have hostNetwork: true set which is unnecessary and less secure.

Solution - Removed hostNetwork: true from linkerd-cni Helm chart templates

PR Fixes #11141 
---------

Signed-off-by: Abhijeet Gaurav <abhijeetdav24aug@gmail.com>
Co-authored-by: Alejandro Pedraza <alejandro@buoyant.io>
This commit is contained in:
Abhijeet Gaurav 2023-08-03 20:23:57 +05:30 committed by GitHub
parent 928f2bedd8
commit bca15f59ed
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
9 changed files with 0 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
charts/linkerd2-cni/templates/cni-plugin.yaml
View File

@ -57,7 +57,6 @@ spec:
{{- end }}
fsGroup:
rule: RunAsAny
hostNetwork: true
runAsUser:
rule: RunAsAny
seLinux:
@ -211,7 +210,6 @@ spec:
affinity:
{{- include "linkerd.node-affinity" . | nindent 8 }}
{{- end }}
hostNetwork: true
securityContext:
seccompProfile:
type: RuntimeDefault

1
cli/cmd/testdata/install-cni-plugin_default.golden generated vendored
View File

@ -108,7 +108,6 @@ spec:
- operator: Exists
nodeSelector:
kubernetes.io/os: linux
hostNetwork: true
securityContext:
seccompProfile:
type: RuntimeDefault

1
cli/cmd/testdata/install-cni-plugin_fully_configured.golden generated vendored
View File

@ -108,7 +108,6 @@ spec:
- operator: Exists
nodeSelector:
kubernetes.io/os: linux
hostNetwork: true
securityContext:
seccompProfile:
type: RuntimeDefault

1
cli/cmd/testdata/install-cni-plugin_fully_configured_equal_dsts.golden generated vendored
View File

@ -108,7 +108,6 @@ spec:
- operator: Exists
nodeSelector:
kubernetes.io/os: linux
hostNetwork: true
securityContext:
seccompProfile:
type: RuntimeDefault

1
cli/cmd/testdata/install-cni-plugin_fully_configured_no_namespace.golden generated vendored
View File

@ -108,7 +108,6 @@ spec:
- operator: Exists
nodeSelector:
kubernetes.io/os: linux
hostNetwork: true
securityContext:
seccompProfile:
type: RuntimeDefault

1
cli/cmd/testdata/install-cni-plugin_skip_ports.golden generated vendored
View File

@ -109,7 +109,6 @@ spec:
- operator: Exists
nodeSelector:
kubernetes.io/os: linux
hostNetwork: true
securityContext:
seccompProfile:
type: RuntimeDefault

1
cli/cmd/testdata/install_cni_helm_default_output.golden generated vendored
View File

@ -101,7 +101,6 @@ spec:
- operator: Exists
nodeSelector:
kubernetes.io/os: linux
hostNetwork: true
securityContext:
seccompProfile:
type: RuntimeDefault

1
cli/cmd/testdata/install_cni_helm_override_output.golden generated vendored
View File

@ -101,7 +101,6 @@ spec:
- operator: Exists
nodeSelector:
kubernetes.io/os: linux
hostNetwork: true
securityContext:
seccompProfile:
type: RuntimeDefault

1
pkg/healthcheck/healthcheck_test.go
View File

@ -2418,7 +2418,6 @@ spec:
spec:
nodeSelector:
kubernetes.io/os: linux
hostNetwork: true
serviceAccountName: linkerd-cni
containers:
- name: install-cni