github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #78272 from yujuhong/disable-windows-defender 

GCE: Disable the Windows defender
k3s-v1.15.3
Kubernetes Prow Robot 2019-05-24 00:46:19 -07:00 committed by GitHub
parent a07b027261 3b58a5d89f
commit 4884873160
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
cluster/gce/windows/k8s-node-setup.psm1
View File

@ -249,18 +249,16 @@ function Set-PrerequisiteOptions {
Install-Module -Name powershell-yaml -Force Install-Module -Name powershell-yaml -Force
} }
# Disables Windows Defender realtime scanning if this Windows node is part of a # Disables Windows Defender realtime scanning.
# test cluster. # TODO: remove this workaround once the fix is rolled out the Windows image
# # https://github.com/kubernetes/kubernetes/issues/75148
# ${kube_env} must have already been set.
function Disable-WindowsDefender { function Disable-WindowsDefender {
# Windows Defender periodically consumes 100% of the CPU, so disable realtime # Windows Defender periodically consumes 100% of the CPU, so disable realtime
# scanning. Uninstalling the Windows Feature will prevent the service from # scanning. Uninstalling the Windows Feature will prevent the service from
# starting after a reboot. # starting after a reboot.
# TODO(pjh): move this step to image preparation, since we don't want to do a # TODO(pjh): move this step to image preparation, since we don't want to do a
# full reboot here. # full reboot here.
if ((Test-IsTestCluster ${kube_env}) -and if ((Get-WindowsFeature -Name 'Windows-Defender').Installed) {
((Get-WindowsFeature -Name 'Windows-Defender').Installed)) {
Log-Output "Disabling Windows Defender service" Log-Output "Disabling Windows Defender service"
Set-MpPreference -DisableRealtimeMonitoring $true Set-MpPreference -DisableRealtimeMonitoring $true
Uninstall-WindowsFeature -Name 'Windows-Defender' Uninstall-WindowsFeature -Name 'Windows-Defender'