Function startNodeShellProcess

pkg/terminal/shell.go:335–452

(k8sClient kubernetes.Interface, cfg *rest.Config, nodeName string, ptyHandler PtyHandler)

	}
}
func startNodeShellProcess(k8sClient kubernetes.Interface, cfg *rest.Config, nodeName string, ptyHandler PtyHandler) error {

	/*创建特权容器*/
	containerName := "node-shell"
	podName :="node-"+nodeName+"-shell"
	namespace :="default"
	image := "alpine:latest"
	ctx :=context.Background()

	getpod ,err :=k8sClient.CoreV1().Pods(namespace).List(ctx, metav1.ListOptions{
	    FieldSelector :"metadata.name="+podName+",metadata.namespace="+namespace,
	})
	if err != nil {
	    return err
	}
	//没有pod则创建
	if len(getpod.Items) == 0 {
	    container := &v1.Container{
			Name:            containerName,
			Image:           image,
			ImagePullPolicy: v1.PullIfNotPresent,
			Stdin:           true,
			StdinOnce:       true,
			TTY:             true,
			Command:         []string{"/bin/sh"},
			SecurityContext: &v1.SecurityContext{
				Privileged : ptr.To(true),
			},
			//挂载hostPath到容器中
			VolumeMounts: []v1.VolumeMount{
			    {
					Name:      "host-root",
					MountPath: "/host",
				},
			},
		}
	
	
		pod := &v1.Pod{
			ObjectMeta: metav1.ObjectMeta{
				Name: podName,
				Namespace: namespace,
			},
			Spec: v1.PodSpec{
				Containers: []v1.Container{*container},
				NodeName: nodeName,
				RestartPolicy: v1.RestartPolicyNever,
				HostNetwork: true,
				HostPID: true,
				Tolerations: []v1.Toleration{
				  
					{
							Key: "CriticalAddonsOnly",
							Operator: v1.TolerationOpExists,
					},
					{
							Key: "NoExecute",
							Operator: v1.TolerationOpExists,