How do you disable ClamAV on a nodepool?

[chrisgavin]

I've noticed my application has started getting evicted from its node due to memory pressure. After investigation this seems to be because ClamAV is using a large amount of the node's memory (It's running with the command line clamscan -d /var/lib/azsec-clamav -r -i --exclude-dir=^/sys/ /bin /boot /home /lib /lib64 /opt /root /sbin /usr).

To me, it does not seem particularly useful to be running an anti-virus scanner on a Kubernetes cluster. Is it possible to disable this service, or is there a node image that does not include it? I'm currently using the AKSUbuntu-1804containerd-2022.03.02 image.

[chrisgavin]

I think I've managed to figure this out. I deleted the "Standard" policy from the Azure Policy page, then deleted the node pool from the cluster and created a new one. After this no azsec tools seemed to be installed on the node.