kmesh-net / kmesh

High Performance ServiceMesh Data Plane Based on Programmable Kernel
https://kmesh.net
Apache License 2.0
361 stars 46 forks source link

Stop setting hostPID #423

Closed hzxuzhonghu closed 6 days ago

hzxuzhonghu commented 3 weeks ago

What would you like to be added:

We set hostPID: true to enable searching through /proc directory to get the pod netns.

In some clusters. for security consideration, hostPID is not allowed, which is risky. We may instead mount hostpath /proc.