A container that runs with hostNetwork set has the ability to interact with host services listening on localhost and potentially monitor traffic belonging to other pods. This opts-out of the network isolation provided by Linux network namespace mechanism.
apiVersion:v1kind:Podmetadata:name:hellospec:containers:-name:helloimage:busyboxcommand:['sh','-c','echo"Hello,Kubernetes!"&&sleep3600']hostNetwork:false# other required fields here