From c0201e493b7052cb1ec6ef2cecffd8e4cdb49157 Mon Sep 17 00:00:00 2001 From: Rakshith R Date: Tue, 13 Jun 2023 15:11:21 +0530 Subject: [PATCH] deploy: set seLinuxMount to true for csidriver objects Setting seLinuxMount:true in csidriver objects advertize that the driver supports passing selinux label in mount options. refer: https://kubernetes.io/blog/2023/04/18/ \ kubernetes-1-27-efficient-selinux-relabeling-beta/ Signed-off-by: Rakshith R --- deploy/cephfs/kubernetes/csidriver.yaml | 1 + deploy/nfs/kubernetes/csidriver.yaml | 1 + deploy/rbd/kubernetes/csidriver.yaml | 1 + 3 files changed, 3 insertions(+) diff --git a/deploy/cephfs/kubernetes/csidriver.yaml b/deploy/cephfs/kubernetes/csidriver.yaml index aa1a0b71a..7664f9d56 100644 --- a/deploy/cephfs/kubernetes/csidriver.yaml +++ b/deploy/cephfs/kubernetes/csidriver.yaml @@ -14,3 +14,4 @@ spec: attachRequired: false podInfoOnMount: false fsGroupPolicy: File + seLinuxMount: true diff --git a/deploy/nfs/kubernetes/csidriver.yaml b/deploy/nfs/kubernetes/csidriver.yaml index 61b466fe9..224b23961 100644 --- a/deploy/nfs/kubernetes/csidriver.yaml +++ b/deploy/nfs/kubernetes/csidriver.yaml @@ -13,5 +13,6 @@ metadata: spec: attachRequired: false fsGroupPolicy: File + seLinuxMount: true volumeLifecycleModes: - Persistent diff --git a/deploy/rbd/kubernetes/csidriver.yaml b/deploy/rbd/kubernetes/csidriver.yaml index 1d91061c4..1d1ae5b15 100644 --- a/deploy/rbd/kubernetes/csidriver.yaml +++ b/deploy/rbd/kubernetes/csidriver.yaml @@ -13,4 +13,5 @@ metadata: spec: attachRequired: true podInfoOnMount: false + seLinuxMount: true fsGroupPolicy: File