bottlerocket-os / bottlerocket-os/bottlerocket
"privileged: true" in pod spec clobbers SELinux options
Open
area/kubernetes
has-workaround
status/needs-proposal
type/bug
- Dominant language
- Rust
- Stars
- 9.7k
- Forks
- 586
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 11
Description
**Image I'm using:**
`aws-k8s-1.28`
**What I expected to happen:**
I ran a pod with this security context:
```
securityContext:
privileged: true
seLinuxOptions:
type: super_t
```
I expected the pod's process to have the `super_t` label on the running system.
**What actually happened:**
The pod's process had the `control_t` label instead.
**How to reproduce the problem:**
See above.
Contributor guide
Assessment
This issue has not been assessed yet.