skip hostnetwok pod's from enforcing network policies

cloudnativelabs · May 25, 2021 · a042e0e · a042e0e
1 parent 9f79001
commit a042e0e
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/pkg/controllers/netpol/pod.go b/pkg/controllers/netpol/pod.go
@@ -36,6 +36,10 @@ func (npc *NetworkPolicyController) newPodEventHandler() cache.ResourceEventHand
 // OnPodUpdate handles updates to pods from the Kubernetes api server
 func (npc *NetworkPolicyController) OnPodUpdate(obj interface{}) {
 	pod := obj.(*api.Pod)
+	if pod.Spec.HostNetwork {
+		klog.V(2).Info("Ignoring update to hostNetwork pod: %s/%s", pod.Namespace, pod.Name)
+		return
+	}
 	klog.V(2).Infof("Received update to pod: %s/%s", pod.Namespace, pod.Name)
 
 	npc.RequestFullSync()