bottlerocket-os / bottlerocket-os/bottlerocket

"privileged: true" in pod spec clobbers SELinux options

Open
#3,791 3 comments 3 reactions 0 assignees View on GitHub
area/kubernetes has-workaround status/needs-proposal type/bug
Dominant language
Rust
Stars
9.7k
Forks
586
Avg merge
1d 11h
Merged PRs (30d)
11

Description

**Image I'm using:**
`aws-k8s-1.28`

**What I expected to happen:**
I ran a pod with this security context:
```
securityContext:
privileged: true
seLinuxOptions:
type: super_t
```

I expected the pod's process to have the `super_t` label on the running system.

**What actually happened:**
The pod's process had the `control_t` label instead.

**How to reproduce the problem:**
See above.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.