chore: changelog

Author: kondracek-nr

CHANGELOG.md

@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## Unreleased
 
+### enhancement
+- Introduce HostProcess Windows containers and "privileged" mode support to collect host metrics on Windows nodes. @kondracek-nr [#1361](https://github.com/newrelic/nri-kubernetes/pull/1361)
+
 ## v3.51.1 - 2025-12-15
 
 ### ⛓️ Dependencies

charts/newrelic-infrastructure/tests/hostNetwork_test.yaml

@@ -34,7 +34,7 @@ tests:
         template: templates/kubelet/daemonset.yaml
       - equal:
           path: spec.template.spec.hostNetwork
-          value: false
+          value: true  # Windows uses hostNetwork when privileged: true (default)
         template: templates/kubelet/daemonset-windows.yaml
 
 
@@ -43,6 +43,7 @@ tests:
       enableWindows: true
       licenseKey: test
       cluster: test
+      privileged: false  # Test unprivileged mode
       global.hostNetwork: null
       hostNetwork: null
       controlPlane.hostNetwork: null
@@ -59,16 +60,16 @@ tests:
           path: spec.template.spec.hostNetwork
           value: false
         template: templates/kubelet/daemonset.yaml
-      - equal:
+      - isNull:
           path: spec.template.spec.hostNetwork
-          value: false
         template: templates/kubelet/daemonset-windows.yaml
 
   - it: hostNetwork is set by the common library
     set:
       enableWindows: true
       licenseKey: test
       cluster: test
+      privileged: false  # Test unprivileged mode
       global.hostNetwork: null
       hostNetwork: true
       controlPlane.hostNetwork: null
@@ -85,16 +86,16 @@ tests:
           path: spec.template.spec.hostNetwork
           value: true
         template: templates/kubelet/daemonset.yaml
-      - equal:
+      - isNull:
           path: spec.template.spec.hostNetwork
-          value: false # Windows should still be false
-        template: templates/kubelet/daemonset-windows.yaml
+        template: templates/kubelet/daemonset-windows.yaml  # Windows in unprivileged mode doesn't render hostNetwork
 
   - it: controlPlane hostNetwork is overridable to true
     set:
       enableWindows: true
       licenseKey: test
       cluster: test
+      privileged: false  # Test unprivileged mode
       global.hostNetwork: null
       hostNetwork: false
       controlPlane.hostNetwork: true
@@ -111,16 +112,16 @@ tests:
           path: spec.template.spec.hostNetwork
           value: false
         template: templates/kubelet/daemonset.yaml
-      - equal:
+      - isNull:
           path: spec.template.spec.hostNetwork
-          value: false
         template: templates/kubelet/daemonset-windows.yaml
 
   - it: controlPlane hostNetwork is overridable to false
     set:
       enableWindows: true
       licenseKey: test
       cluster: test
+      privileged: false  # Test unprivileged mode
       global.hostNetwork: null
       hostNetwork: true
       controlPlane.hostNetwork: false
@@ -137,16 +138,16 @@ tests:
           path: spec.template.spec.hostNetwork
           value: true
         template: templates/kubelet/daemonset.yaml
-      - equal:
+      - isNull:
           path: spec.template.spec.hostNetwork
-          value: false
         template: templates/kubelet/daemonset-windows.yaml
 
   - it: ksm hostNetwork is overridable to true
     set:
       enableWindows: true
       licenseKey: test
       cluster: test
+      privileged: false  # Test unprivileged mode
       global.hostNetwork: null
       hostNetwork: false
       ksm.hostNetwork: true
@@ -163,16 +164,16 @@ tests:
           path: spec.template.spec.hostNetwork
           value: false
         template: templates/kubelet/daemonset.yaml
-      - equal:
+      - isNull:
           path: spec.template.spec.hostNetwork
-          value: false
         template: templates/kubelet/daemonset-windows.yaml
 
   - it: ksm hostNetwork is overridable to false
     set:
       enableWindows: true
       licenseKey: test
       cluster: test
+      privileged: false  # Test unprivileged mode
       global.hostNetwork: null
       hostNetwork: true
       ksm.hostNetwork: false
@@ -189,16 +190,16 @@ tests:
           path: spec.template.spec.hostNetwork
           value: true
         template: templates/kubelet/daemonset.yaml
-      - equal:
+      - isNull:
           path: spec.template.spec.hostNetwork
-          value: false
         template: templates/kubelet/daemonset-windows.yaml
 
   - it: kubelet hostNetwork is overridable to true
     set:
       enableWindows: true
       licenseKey: test
       cluster: test
+      privileged: false  # Test unprivileged mode
       global.hostNetwork: null
       hostNetwork: false
       kubelet.hostNetwork: true
@@ -215,16 +216,16 @@ tests:
           path: spec.template.spec.hostNetwork
           value: true
         template: templates/kubelet/daemonset.yaml
-      - equal:
+      - isNull:
           path: spec.template.spec.hostNetwork
-          value: false
         template: templates/kubelet/daemonset-windows.yaml
 
   - it: kubelet hostNetwork is overridable to false
     set:
       enableWindows: true
       licenseKey: test
       cluster: test
+      privileged: false  # Test unprivileged mode
       global.hostNetwork: null
       hostNetwork: true
       kubelet.hostNetwork: false
@@ -241,7 +242,6 @@ tests:
           path: spec.template.spec.hostNetwork
           value: false
         template: templates/kubelet/daemonset.yaml
-      - equal:
+      - isNull:
           path: spec.template.spec.hostNetwork
-          value: false
         template: templates/kubelet/daemonset-windows.yaml

charts/newrelic-infrastructure/tests/securityContext_test.yaml

@@ -202,32 +202,37 @@ tests:
       licenseKey: test
       cluster: test
       enableWindows: true
+      privileged: false  # Test unprivileged mode
     asserts:
       - equal:
           path: spec.template.spec.containers[0].securityContext
           value:
             windowsOptions:
+              hostProcess: false
               runAsUserName: 'ContainerUser'
         documentIndex: 0
         template: templates/kubelet/daemonset-windows.yaml
       - equal:
           path: spec.template.spec.containers[1].securityContext
           value:
             windowsOptions:
+              hostProcess: false
               runAsUserName: 'ContainerUser'
         documentIndex: 0
         template: templates/kubelet/daemonset-windows.yaml
       - equal:
           path: spec.template.spec.containers[0].securityContext
           value:
             windowsOptions:
+              hostProcess: false
               runAsUserName: 'ContainerUser'
         documentIndex: 1
         template: templates/kubelet/daemonset-windows.yaml
       - equal:
           path: spec.template.spec.containers[1].securityContext
           value:
             windowsOptions:
+              hostProcess: false
               runAsUserName: 'ContainerUser'
         documentIndex: 1
         template: templates/kubelet/daemonset-windows.yaml
@@ -237,6 +242,7 @@ tests:
       licenseKey: test
       cluster: test
       enableWindows: true
+      privileged: false  # Test unprivileged mode
       global.containerSecurityContext:
         runAsUser: 1000
         runAsGroup: 2000
@@ -245,13 +251,15 @@ tests:
           path: spec.template.spec.containers[0].securityContext
           value:
             windowsOptions:
+              hostProcess: false
               runAsUserName: 'ContainerUser'
         documentIndex: 0
         template: templates/kubelet/daemonset-windows.yaml
       - equal:
           path: spec.template.spec.containers[1].securityContext
           value:
             windowsOptions:
+              hostProcess: false
               runAsUserName: 'ContainerUser'
         documentIndex: 0
         template: templates/kubelet/daemonset-windows.yaml