preclude pod with host network to be managed by kmesh

pkg/utils/enroll.go

@@ -42,6 +42,11 @@ func ShouldEnroll(pod *corev1.Pod, ns *corev1.Namespace) bool {
 		return false
 	}
 
+	// exclude pod with host network set, otherwise it will cause other pods with host network to be managed by kmesh
+	if pod.Spec.HostNetwork {
+		return false
+	}
+
 	// If it is a Pod of waypoint, it should not be managed by Kmesh
 	// Exclude istio managed gateway
 	if gateway, ok := pod.Labels["gateway.istio.io/managed"]; ok {

pkg/utils/enroll_test.go

@@ -69,6 +69,37 @@ func TestShouldEnroll(t *testing.T) {
 			},
 			want: true,
 		},
+		{
+			name: "pod with hostnetwork",
+			args: args{
+				namespace: &corev1.Namespace{
+					TypeMeta: metav1.TypeMeta{
+						Kind:       "Namespace",
+						APIVersion: "v1",
+					},
+					ObjectMeta: metav1.ObjectMeta{
+						Name: "ut-test",
+					},
+				},
+				pod: &corev1.Pod{
+					TypeMeta: metav1.TypeMeta{
+						Kind:       "Pod",
+						APIVersion: "v1",
+					},
+					ObjectMeta: metav1.ObjectMeta{
+						Namespace: "ut-test",
+						Name:      "ut-pod",
+						Labels: map[string]string{
+							constants.DataPlaneModeLabel: constants.DataPlaneModeKmesh,
+						},
+					},
+					Spec: corev1.PodSpec{
+						HostNetwork: true,
+					},
+				},
+			},
+			want: false,
+		},
 		{
 			name: "sidecar misconfigured label",
 			args: args{