feat: adding kubelet and csi-proxy-server as windows defender exclude…

…d processes (Azure#2967) (Azure#3118) Co-authored-by: Mark Rossetti <marosset@microsoft.com>
AbelHu · Apr 22, 2020 · 320fd4a · 320fd4a
1 parent 1cf27ab
commit 320fd4a
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 2 deletions.
diff --git a/parts/k8s/kuberneteswindowsfunctions.ps1 b/parts/k8s/kuberneteswindowsfunctions.ps1
@@ -233,3 +233,11 @@ function Assert-FileExists {
         throw "$Filename does not exist"
     }
 }
+
+function Update-DefenderPreferences {
+    Add-MpPreference -ExclusionProcess "c:\k\kubelet.exe"
+
+    if ($global:EnableCsiProxy) {
+        Add-MpPreference -ExclusionProcess "c:\k\csi-proxy-server.exe"
+    }
+}
diff --git a/parts/k8s/kuberneteswindowssetup.ps1 b/parts/k8s/kuberneteswindowssetup.ps1
@@ -414,7 +414,8 @@ try
         Adjust-DynamicPortRange
         Register-LogsCleanupScriptTask
         Register-NodeResetScriptTask
-
+        Update-DefenderPreferences
+
         if (Test-Path $CacheDir)
         {
             Write-Log "Removing aks-engine bits cache directory"

diff --git a/pkg/engine/templates_generated.go b/pkg/engine/templates_generated.go