Privileged k8s "ssh" pod

ssh-pod.sh

#!/usr/bin/env bash

pod_name=nick-ssh

# the first node
k8s_node=$(kubectl get nodes -o jsonpath='{.items[0].metadata.name}')

cat <<EOF | kubectl create -f -
apiVersion: v1
kind: Pod
metadata:
  name: "${pod_name}"
spec:
  restartPolicy: Never
  hostNetwork: true
  hostPID: true
  containers:
  - name: ubuntu
    image: ubuntu:22.04
    command: [sleep]
    args: [infinity]
    securityContext:
      privileged: true
    volumeMounts:
    - name: host
      mountPath: /host
  volumes:
  - name: host
    hostPath:
      path: /
      type: Directory
  nodeName: "${k8s_node}"
EOF

kubectl wait --for=condition=Ready=true "pod/${pod_name}"
kubectl exec -i --tty "${pod_name}" -- chroot /host /bin/bash