Initial work

[v-ctiutiu]

Overview

Changes made in this PR:

• Initial documentation about how to deploy and test the operator.
• Main logic (implemented using Python) to add/change/remove static routes.
• Sample manifests for testing.

[guardrails]

⚠️ We detected 3 security issues in this pull request:

Insecure Configuration (1)

Docs	Details
💡	Title: hostNetwork is exposed, Severity: Medium k8s-staticroute-operator/operator/operator-daemonset.yaml Line 15 in 7408a88 hostNetwork: true

More info on how to fix Insecure Configuration in Kubernetes.

---

Insecure Access Control (2)

Docs	Details
💡	Title: DROP All Capabilities, Severity: Low File: operator/operator-daemonset.yaml
💡	Title: Containers With Added Capabilities, Severity: Medium k8s-staticroute-operator/operator/operator-daemonset.yaml Line 26 in 7408a88 add:

More info on how to fix Insecure Access Control in Kubernetes.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[bikram20]

@v-ctiutiu Nice work! Does the operator need hostNetwork: true?

[v-ctiutiu]

@v-ctiutiu Nice work! Does the operator need hostNetwork: true?

Yes, it doesn't work without that setting. The reason is that it needs access to host network to alter static routes. The operator runs in a Docker container after all, hence it runs in an isolated network from the main host.

Hope it makes sense. Thanks.

[bikram20]

Got it. Thanks.