initial commit

newfl.yaml

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app: security
+  name: flow-server
+
+---
+apiVersion: "k8s.cni.cncf.io/v1"
+kind: NetworkAttachmentDefinition
+metadata:
+  name: macvlan-conf
+spec:
+  config: '{
+    "cniVersion": "0.3.1",
+    "type": "macvlan",
+    "master": "enp1s0",
+    "mode": "bridge",
+    "ipam": {
+    "type": "static",
+    "routes": [
+    {
+    "dst": "0.0.0.0/0",
+    "gw": "10.1.1.1"
+    }
+    ]
+    }
+    }'
+
+
+
+---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    app: security
+    component: flow-server
+  name: flow-server
+spec:
+  selector:
+    matchLabels:
+      app: security
+      component: flow-server
+  template:
+    metadata:
+      annotations:
+        kubectl.kubernetes.io/default-container: flow-server
+        k8s.v1.cni.cncf.io/networks: '[
+          { "name": "macvlan-conf",
+          "ips": [ "10.1.1.201/24" ],
+          "mac": "c2:b0:57:49:47:f1",
+          "gateway": [ "10.1.1.1" ]
+          }]'
+      labels:
+        app: security
+        component: flow-server
+    spec:
+      containers:        
+      - name: flow-server
+        image: stavroslir/newflow-server
+        command:  ['bash', '-c', "/home/tsi/bin/server  -c 10.1.1.201:12345 "]
+        env:
+        - name: IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        imagePullPolicy: Always
+        ports:
+          - containerPort: 12345
+        securityContext:
+          privileged: true
+        volumeMounts:
+          - mountPath: /var/run/openvswitch
+            name: host-var-run-antrea
+            subPath: openvswitch
+      dnsPolicy: ClusterFirstWithHostNet
+      nodeSelector:
+        kubernetes.io/os: linux
+      priorityClassName: system-node-critical
+      serviceAccountName: flow-server
+      tolerations:
+        - key: CriticalAddonsOnly
+          operator: Exists
+        - effect: NoSchedule
+          operator: Exists
+        - effect: NoExecute
+          operator: Exists
+      volumes:
+        - hostPath:
+            path: /var/run/antrea
+            type: DirectoryOrCreate
+          name: host-var-run-antrea
+  updateStrategy:
+    type: RollingUpdate
+

newmirroringpod.yaml

----
-apiVersion: "k8s.cni.cncf.io/v1"
-kind: NetworkAttachmentDefinition
-metadata:
-  name: macvlan-host-local
-spec:
-  config: '{
-      "cniVersion": "0.3.0",
-      "type": "macvlan",
-      "master": "enp1s0",
-      "mode": "bridge",
-      "ipam": {
-          "type": "static",
-          "routes": [{
-                  "dst": "10.224.1.30/0",
-                  "gw": "10.224.1.31"      
-        }]
-      }
-    }'
----
-
-
 --- 
 apiVersion: apps/v1
 kind: Deployment
@@ -37,9 +15,8 @@ spec:
       annotations:
         kubectl.kubernetes.io/default-container: flow-server
         k8s.v1.cni.cncf.io/networks: '[
-          { "name": "macvlan-host-local",
-          "ips": [ "10.1.1.201/24" ],
-          "mac": "c2:b0:57:49:47:f1",
+          { "name": "macvlan-conf",
+          "ips": [ "10.1.1.202/24" ],
           "gateway": [ "10.1.1.1" ]
           }]'
 
@@ -66,7 +43,7 @@ spec:
         - name: dnsmonitor
           image: stavroslir/dns_monitor
           ports:
-          - containerPort: 8080
+          - containerPort: 8081
           command: ["/bin/sh","-c", "/home/dns_monitor.py -i eth0 -f /home/dmns |while true; do sleep;done"]
           imagePullPolicy: Always
 

testflow.yaml

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app: security
+  name: flow-server
+
+---
+apiVersion: "k8s.cni.cncf.io/v1"
+kind: NetworkAttachmentDefinition
+metadata:
+  name: macvlan-conf
+spec:
+  config: '{
+    "cniVersion": "0.3.1",
+    "type": "macvlan",
+    "master": "enp1s0",
+    "mode": "bridge",
+    "ipam": {
+    "type": "static",
+    "routes": [
+    {
+    "dst": "0.0.0.0/0",
+    "gw": "10.1.1.1"
+    }
+    ]
+    }
+    }'
+
+
+
+---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    app: security
+    component: flow-server
+  name: flow-server
+spec:
+  selector:
+    matchLabels:
+      app: security
+      component: flow-server
+  template:
+    metadata:
+      annotations:
+        kubectl.kubernetes.io/default-container: flow-server
+        k8s.v1.cni.cncf.io/networks: '[
+          { "name": "macvlan-conf",
+          "ips": [ "10.1.1.201/24" ],
+          "mac": "c2:b0:57:49:47:f1",
+          "gateway": [ "10.1.1.1" ]
+          }]'
+      labels:
+        app: security
+        component: flow-server
+    spec:
+      containers:        
+      - name: flow-server
+        image: stavroslir/newflow-server
+        command:  ['bash', '-c', "/home/tsi/bin/server -bc $(FLOW_BROADCASTER_SERVICE_HOST):$(FLOW_BROADCASTER_SERVICE_PORT_FLOW) -c 10.1.1.201:12345 -s $(ip a | grep inet | head -2 | tail -1 | awk '{print $2}')"]
+        env:
+        - name: IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        imagePullPolicy: Always
+        ports:
+          - containerPort: 12345
+        securityContext:
+          privileged: true
+        volumeMounts:
+          - mountPath: /var/run/openvswitch
+            name: host-var-run-antrea
+            subPath: openvswitch
+      dnsPolicy: ClusterFirstWithHostNet
+      nodeSelector:
+        kubernetes.io/os: linux
+      priorityClassName: system-node-critical
+      serviceAccountName: flow-server
+      tolerations:
+        - key: CriticalAddonsOnly
+          operator: Exists
+        - effect: NoSchedule
+          operator: Exists
+        - effect: NoExecute
+          operator: Exists
+      volumes:
+        - hostPath:
+            path: /var/run/antrea
+            type: DirectoryOrCreate
+          name: host-var-run-antrea
+  updateStrategy:
+    type: RollingUpdate
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: security
+    component: flow-broadcaster
+  name: flow-broadcaster
+
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: security
+      component: flow-broadcaster
+  template:
+    metadata:
+      labels:
+        app: security
+        component: flow-broadcaster
+    spec:
+      containers:
+      - name: flow-broadcaster
+        image: 147.27.39.116:5000/antrea-tsi:v1.0.0
+        command:
+          - /home/tsi/bin/broadcaster
+        args:
+          - -c
+          - $(IP):30000
+          - -ac
+          - $(IP):30001
+        env:
+        - name: IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        imagePullPolicy: Always
+        ports:
+          - containerPort: 30000
+          - containerPort: 30001
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: flow-broadcaster
+ 
+spec:
+  type: ClusterIP
+  selector:
+    app: security
+    component: flow-broadcaster
+  ports:
+    - port: 30000
+      targetPort: 30000
+      name: flow
+    - port: 30001
+      targetPort: 30001
+      name: api
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: api
+  labels:
+    app: security
+    component: api
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: security
+      component: api
+  template:
+    metadata:
+      labels:
+        app: security
+        component: api
+    spec:
+      containers:
+      - env:
+        - name: IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        name: api
+        image: 147.27.39.116:5000/tsi-api:v1.0.0
+        imagePullPolicy: Always 
+        volumeMounts:
+          - mountPath: /home/.kube/
+            name: kubeconfig
+        command:
+          - ./server
+        args:
+          - -ll=$(IP):8001
+          - -r=147.27.39.116
+        ports:
+        - containerPort: 8000
+        - containerPort: 8001
+      nodeSelector:
+        dedicated: master
+      volumes:
+      - hostPath:
+          path: /home/stavros/.kube/
+          type: DirectoryOrCreate
+        name: kubeconfig
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: api-service
+spec:
+  type: ClusterIP
+  selector:
+    app: security
+    component: api
+  clusterIP: 10.104.54.11
+  ports:
+    - port: 8001
+      targetPort: 8001
+      protocol: TCP
+      name: local-api
+

tm.yaml

+--- 
+apiVersion: apps/v1
+kind: Deployment
+metadata: 
+  labels: 
+    app: mypod2
+  name: snortpod2
+spec: 
+  replicas: 1
+  selector: 
+    matchLabels: 
+      app: myapp2
+  template: 
+    metadata: 
+      annotations:
+        kubectl.kubernetes.io/default-container: flow-server
+        k8s.v1.cni.cncf.io/networks: '[
+          { "name": "macvlan-conf",
+          "ips": [ "10.1.1.202/24" ],
+          "gateway": [ "10.1.1.1" ]
+          }]'
+
+      labels: 
+        app: myapp2
+    spec: 
+      volumes:
+      - hostPath:
+          path: /var/run/antrea
+          type: DirectoryOrCreate
+        name: host-var-run-antrea
+      containers: 
+        - 
+          command: 
+            - /bin/sh
+            - "-c"
+            - "/var/log/snort/myshellscript.sh  |while true; do sleep;done"
+          image: stavroslir/mynewsnortpod
+          imagePullPolicy: Always
+          name: snortpod2
+          ports: 
+            - 
+              containerPort: 8080  
+        - name: dnsmonitor
+          image: stavroslir/testdns
+          ports:
+          - containerPort: 8081
+          command: ["/bin/sh","-c", "/home/dns_monitor.py -i eth0 -f /home/dmns |while true; do sleep;done"]
+          imagePullPolicy: Always
+
+      initContainers: 
+        - 
+          command: 
+            - sh
+            - "-c"
+            - /home/mirroring.sh
+          image: stavroslir/mymirroring
+          name: init-mirroring
+          volumeMounts: 
+          - mountPath: /var/run/openvswitch
+            name : host-var-run-antrea
+            subPath: openvswitch
+